the xpubs can be put on google drive, emailed to yourself, etc etc. make infinite copies and put it anywhere.

so while you do HAVE to have all 3 xpubs, i can’t image a scenario of someone knowing that, and losing them.

not knowing you need all three, and then losing it, 100% see that happening.

so yes, don’t do multi sig if u don’t understand it