https://www.privacyguides.org/en/basics/threat-modeling/
TL;DR What you want to protect and who you want to protect it from in terms of both security AND privacy (which are differentiated in the previous section: https://www.privacyguides.org/en/basics/why-privacy-matters/#what-is-privacy)
I really wouldn’t mind talking like Alastair from Hazbin Hotel (a transatlantic accent I think it’s called?) but I’d need to work it into educational content 💀