I disagree. Cold storage is the only way to provide full sovereignty.

L2, as of now, requires a hot wallet. That is not secure against a sophisticated attack. The protocol could be, but not individuals.

Multi-vendor multi-sig in cold storage fixes this.