https://jon.sprig.gs/blog/post/895
One to read: An introduction to approachable threat modeling