docs: update security best practices for current threat model

docs: update security best practices for current threat model #1601