Adjust threat modeling

[hon1nbo]

Part of the original data set that was compiled for this called for mentioning DC is the kind of place a hypervisor 0day might drop. In reality that seems like a borked threat model.
The various scenarios need to be double checked. Right now they lie on the conservative side, but FUD isn't something that should be in this repo.

Opened this issue to keep track of things I can't get to away from my dev machine.