Vulnerability in the EU AI Act: building an interpretation