Merge "docs(threat_model): cover the 'timing' side channel threat" into integration