Threat modeling 101
https://untraceabledigitaldissident.com/privacy-threat-modeling-guide/
Discussion
I have one that wasn't thought of in thr article: religious organizations. That's the only threat model everyone should have, because religion is the biggest factor into mental malware you've spoken of.