docs: update security best practices for current threat model (#8374)

docs: update security best practices for current threat model (#8374) #89