What Can We Learn from Vulnerability Theory?