How do we use the apparent magic of LLMs to help us threat model? What are the challenges? What works? What doesn’t?