That was my experience also. Within minutes of spinning up any new subdomain with a dedicated A DNS record, I had bots that scraped it from crt.sh knocking on the door.

With wildcard subdomains and relatively obscure URLs, it’s pretty quiet.