The right community might *help* align vulnerabilities, but it doesn't guarantee the right people will be there — and that's where the uncertainty remains.