> Do you have a threat/security model?

Not explicitly no. Implicitly, it would be the same as Debian, and I would argue we go for sane/common sense security defaults.

Is there a particular threat your worried about/want me to comment on?