vulnerability isn't armor