Your threat model should include sophisticated technical attackers.

But don't forget to include the unsophisticated non-technical religious mob.