What makes Artificial Intelligence and Machine Learning models vulnerable?

Ok we've talked about risks, vulnerabilities and exploits in AI/ML models.. but why are they actually vulnerable? In cyber and information security we talk about a system as an 'attack surface' in terms of its potential vulnerabilities and exploits, this is how we need to be thinking about AI systems too.