The threat model that survives

Most threat models die on contact with an intern with production access.

The one that survives is the one written for the tired engineer at 11pm, not for the auditor at 11am.