because its not that easy.
if i write some part of the code to detect if you are a good human and will you go to hell or heaven, to evaluate that for me would be hard. and if you had a access to my source code you could check what i am looking for and could maybe cheat.
the vulnerability i would call is if i sent you to hell and you found a way to escape.
the vulnerability i would call is if i sent you to hell and you found a way to escape.