The "thing" is they're "mixing two threat models"? What does that mean? I feel like they have 1 threat model and the "thing" is you're trying to decompose it i

The "thing" is they're "mixing two threat models"? What does that mean? I feel like they have 1 threat model and the "thing" is you're trying to decompose it into a mixture of black and white....