I've tested something, and I can say that multisig is seriously broken on at least Sparrow and coldcard.

I'll try to document it in time. So anyone who likes to verify can do so.

Still waiting for the solution from Sparrow now. But does't look good , even if they can solve it somehow, it brings extra complexity to the whole thing (last thing we needed).