At the top of everyone's computer security threat models should be:
1. Silicon Valley is run by a clique of unaccountable billionaires at least some of whom are actual Nazis, or at least Nazi-curious and find Nazis sympathetic and interesting and worth hearing out because they have important and fun ideas
2. The United States Government, as of 2017, is run by people who are actual Nazis and also Russian Mafia
Yet very few Silicon Valley Best Practices seem to take #1 into account