I think it just speaks to the complexity we are reaching in software engineering. Feature A and feature B might be safe in and of themselves but a composition contains a vulnerability.