Add threat model, expand sentence about repository files, and promote the maximum security model