Risking everything: vulnerability and the migration cycle