Threat modeling is the only logical way to reason about privacy and security. It is quite a tedious exercise of listing all the adversaries you're worried about

Threat modeling is the only logical way to reason about privacy and security. It is quite a tedious exercise of listing all the adversaries you're worried about, their capabilities, and data they want to compromise. Such a model will reveal gaps and additional controls you can implement to improve your state.