[billdietrich1]

I think most people's threat model is the same. They just want to protect all their data against all threats, to a reasonable level of inconvenience. It's too general to be useful.

So, instead of trying to come up with a threat model, just use best practices. Backups, password manager, blockers in browser, software updating, firewalls, etc.

Now, if you're the 1 person in 100 or 1000 who has a stalker or who is ordering drugs over the internet, trying to create a specific threat model is appropriate.