Thanks, just realized that this is not [email protected] and people here are probably not aware of threat modeling. But in this context just the word ‘thread’ might actually fit better as the threat model pretty much stays the same.