I went overboard with multisig. It would require collusion between parties that aren't aware of each others' existence across multiple jurisdictions. And even then, they still would have to brute force a passphrase before I found out.