Disaggregating vulnerability to floods