Which one is not right about threat models?

A$.$

May be contrary to our normal thought models as software engineers

B$.$

$.$It's direct, we don't need to require senior knowledge that is intimately familiar with the application software domain.

C$.$

Need to think like the attacker, not our customers.

D$.$

Defining and understanding the potential security threats.