That threat model post is really good. I have a pet saw that is: for security companies, the threat model is the product. There might be a few things I would add to that post, but really, it's a very sound approach.