Much worse. Log4j was hard to exploit and worked only in specific condions. And it was bad. This is something else.

log4j was indeed the last time the internet storm center went to threat level yellow (as it is today again)