Threat models should be published, not secret. Publishing your threat models helps both you and your customers. We all know why we don't publish them today, but those problems can be overcome. We'll talk about how to do so, because at the end of the day "showing your work" is the very best way to say "We did a good job" and "we're proud of our security." If your customers want to know that, shouldn't you be telling them?