Idk man, at least for me the only vulnerability for bitcoin is the same for hwo uses tor and so on: the user.

If they dont know for what bitcoin is or how to use the question is when the state will back.