Move threat model doc to GitHub

Move threat model doc to GitHub
Still have no idea what this means. How? Shoulder surfing (in which case they're local, not remote, whereas the rest of this section is concerned with remote attacks)? XSS?