“When you are doing threat modeling, take consider, like do consider these APIs and their flow, their business logic.”

Transcript evidence from Akansha Shukla - Modern AppSec: Securing APIs with Threat Modeling and DevSecOps.