Since we expect products to always have vulnerabilities, we hope that they only have the most
difficult-to-find, difficult-to-exploit vulnerabilities. Concepts such as artifact labels could be
used to calculate the "distance" from input to exploit; novelty and complexity of manipulations
could be evaluated more cleanly; actors and channels could be used to describe a "topology"