A 2-of-3 multisig would be interesting. You control one key on the phone, a second key by a trusted bot (running on your node at home and auto-signing events based on rules), and a 3rd key offline as backup.

The only trick then is that the "multisig pubkey" is the actual profile pubkey.

Don't see a reason why it wouldn't work.