it seems variables in vars/main.yml are 'role variables' with a high precedence, while variables in defaults/main.yml are 'role default variables' with a low precedence. This could be made a hell of a lot clearer in the docs.