A bug that may not affect the intended UX in any way can potentially be exploited to make it do something very different than it’s intended. The sharpest hackers read these bugs as vulnerabilities.