[aw1621107]

Depends on the "threat model" I suppose, for lack of a better phrase. I'd imagine hardware faults and the response(s) can be modeled if you decide to do so as well.