@soatok These days, when I hear that the problem is outside of their threat model, then I conclude that they are the threat model.