I updated the post with more detailed threat modeling and SSH as a TOFU case study for UX. Thx for the feedback everyone!