Does this assume a stable and relatively slow rate of change? Because at some scales I imagine preventing vulnerabilities could be equally difficult.