What is a common mistake when working with STRIDE?

A common mistake with STRIDE is listing all six STRIDE words for every component without describing an actual attack path produces a checklist rather than a useful threat model. The safer approach is to design and test the behavior explicitly rather than assuming the platform or dependency will handle it automatically.