Criticisms of threat modeling

I’m against the concept of threat modeling because in my opinion, privacy is not about an individual choice (putting aside the very real exceptions like journalists or activists). IMO, privacy should be a collective choice and a political statement: “hey, we’re not ok with this massive surveillance sh*t.”

I’ll quote myself: