The app_metadata and user_metadata fields have a combined maximum limit of 16 MB total per user. There is no limit to the number of properties that may be stored in these fields.
The 10 string fields whose values do not exceed 500 characters each limit only apply when a user is created using the /dbconnections/signup endpoint.