looking at the "secure #js #crypto" talk from todays #realworldcrypto and i wonder, what is the #threatmodel