>Developers don't need to care about threat models. I disagree. A lot of time is spent worrying[1] about theoretical attacks that require non-invasive physical

>Developers don't need to care about threat models. I disagree. A lot of time is spent worrying[1] about theoretical attacks that require non-invasive physical access. In reality, it's very unlikely you require, or are able to implement, a threat model where non-invasive physical access by bad actors is protected against. That requires hardware that doesn't expose what it's doing through power consumption, heat output, timing, unencrypted data, etc. That's not even the top level. There's a need for developers to follow best-practice about cryptography, etc., not for them to follow-best practice to prevent attacks that involve photographing bare silicon. [1] Particularly on online forums. A poster has heard that an attack is possible, therefore they accuse anyone who doesn't have a mitigation against it of being incompetent.