Threat modelling

 Describe how threat modeling for the low-trust side of an API would differ from threat modeling on the high-trust side of an API. 

 Define and defend your position on data privacy policy for a hypothetical e-commerce web site.