I'd agree with ThePreacher that the number 1 security vulnerability is ignorance, as if you didn't have the stupid ignorant users, then reverse engineering wouldn't work that well...