You can sometimes only see the “vulnerable” status if you have at least docked one time on that station.
Random HighSec Station, I checked 3 of them and all had the status “vulnerable”. Like our stations in W-Space also have, with core and all services running. It is the normal full power status.