Move threat model doc to GitHub

Move threat model doc to GitHub
No, you need to be clearer about attacker capabilities and potential attack scenarios. It's important to describe what could happen if an attacker was able to gain a copy of a journalist's credentials. What kind of damage could they do (tampering, spoofing)? What kind of access could they have (information disclosure)? What would happen if they deleted documents or sources (denial of service)? etc. Btw these terms are from the STRIDE mnemonic, which is used in Adam Shostack's "Threat Modeling".