Threat modelling is nonsense according to Custodiate.

I personally go more for the route of, "giving very little data" while also going by a singular pseudonym. Sure, it may not be the best, but it's a balancing act I try to practice as best as possible.