“The phrase 'still have vulnerabilities' signals unresolved risk and ongoing caution without implying immediate crisis or catastrophe.”