I think you are projecting the sense of the word from computer security onto people. But "vulnerability" always has that second sense in common speech, as in "showing vulnerability". If a person is actually open to being harmed in some way we use the phrasing "they are vulnerable to ...", which has quite a different meaning.