“But if you threat model a real system with OWASP Cornucopia, you'll learn stuff about a real system that you can go ahead and use.”

Transcript evidence from Simon Gibbs & Devika Gibbs -- Building Bridges with Games.