What I've learned about avoiding vulnerability