Is this another "trust minimised" multisig thing?
Discussion
correct, still better than a federation :)
That depends who has the keys to the multisig :)
Yes.
A 1-of-n lifeness assumption of the operators.
As well as a 1-of-any to challenge a malicious bridge withdraw.