A threat model is just a cognitive tool whose primary value is in creating an alternative perspective on a design problem to broaden thinking and improve outcom

A threat model is just a cognitive tool whose primary value is in creating an alternative perspective on a design problem to broaden thinking and improve outcomes. Like any tool, there are people who carry the hammer too far and suddenly everything is a nail. As soon as they start harping on about a "journey of understanding" and "multiple deliveries" your bubbling instinct of disgust is correct and you should run and hide. I don't trust security people to do sane things. - Linus Torvalds (2017)