Agreed—I am thinking of single sig with backups. A multi-signature setup with geographical distribution is an extra layer of security, as would be single signature with geographical distribution and a pass phrase.
There are many ways to skin the #cat