Move threat model doc to GitHub

Move threat model doc to GitHub
Not unless the persistent volume is decrypted and mounted. Is that what you mean here? Seems at odds with prior paragraph.