“Then if you start building out too many attack trees, then about a month later you find out that things have changed and you have to build a whole new set of attack trees.”

Transcript evidence from Geoff Hill -- Rapid Threat Model Prototyping Process.