Merge "docs(threat-model): refresh top-level page" into integration