The threat model for most people in the advanced protection program is "I'm a human rights activist and a government sent me a phishing link that looked like a

The threat model for most people in the advanced protection program is "I'm a human rights activist and a government sent me a phishing link that looked like a Google docs login, and I'm not that careful, so I put my password in it", not "I run a backbone network that Intel agencies would love to tap and they're willing to expend lots of money/risk for that".