I did not define vulnerability,I only explained security. This is security101. Risk is measured by multiplying vulnerability by threat. Maybe an analogy might

I did not define vulnerability,I only explained security. This is security101. Risk is measured by multiplying vulnerability by threat. Maybe an analogy might help. You are vulnerable to bullets. But your security with respect to your bullet vulnerability is measured by multiplying it against active threats that might shoot you with bullets. So,your security decreases when in a warzone as opposed to lying in bed at your suburban house due to reduction of threat.