“Vulnerability” isn’t really the right term for “we left something explicitly vulnerable and exposed to the internet”