[toomuchtodo]

So avoid being subject to the US jurisdiction, if applicable. Do not store data or operate the system from within the US, or any country within US reach.

https://owasp.org/www-community/Threat_Modeling_Process