In my mind there are only two factors that matter: the accessibility of the attack vector and the extent of the blast area if the target is compromised.