Mention threat model in the docs

[davidbenque]

After discussion with @Chouhartem adding this note to mention the threat model in the docs.

• [ ] Add link to best practices blog post
• [ ] any other additions that could be relevant

Should be done as part of #53