I'm no security expert, but this discussion leaves a large part of the threat model implicit before discussing countermeasures: what is the asset that needs pro

I'm no security expert, but this discussion leaves a large part of the threat model implicit before discussing countermeasures: what is the asset that needs protecting, who is the threat actor, what is the threat vector, what would be the likelihood and the damage. Not spelling this out leads to a lot of "yeah, but what about XYZ" discussions.