Clarify on attack vectors