There should be some limit to the threat model, though. It should not attempt to remain secure when something can do arbitrary read and writes (VM), for example

There should be some limit to the threat model, though. It should not attempt to remain secure when something can do arbitrary read and writes (VM), for example. Even determined adversaries will merely be armed, not equipped with WMDs.