Hacker News Reader

Threat = intent + opportunity + capability.

The vulnerability is the opportunity.

At the same time, wouldn't a bright adversary hide their intent and capabilities?

Yes. Capability protection is everything for intelligence services.