vulnerability is not failure