Digital identity wallets, introduced under eIDAS 2.0, enable decentralized and user-controlled management of personal data across online services. However, as a new model with new entities and interaction patterns, their security and privacy risks remain insufficiently understood. This session presents a structured threat modeling using STRIDE and LINDDUN, and outlines potential threats with key mitigation strategies while inviting community feedback to identify missing threats and mitigations.