Architecture Implications of Threat Modeling