As a cautionary tale of what people should NOT do. Don't over-complicate your cold storage setups!
We added BIP-85 support to #[2] (and I even helped out on that PR) but I will never recommend it to anyone. Our UX (and my personal justification for including it) is more about verifying other BIP-85 implementations, but it's intentionally biased against promoting the resulting child seed to be a usable signing seed in the UI.
For sure. Definitely highlights how two-way trust is inherent is such a set up.
I'll outline both of these things in the risk/tradeoff section for sure
My preferred Uncle Jim solution is either:
* Just teach them (as we're all trying to do) and ease them into their own self-custody. But at some point they are off and flying on their own. If they screw up, they learn a valuable lesson. Too bad.
* If I really need to be able to bail them out, I'd maybe consider a 1-of-2 multisig.
But mostly I'm a "learn it + personal responsibility" maxi.
