How secure something is doesn't change based on the threat model.