While static reachability can help teams better understand their app vulnerabilities, they must be paired with other types of context and risk insights.