Ive found seed+passphrase to be perfectly sufficient for an individual, and multi-sig being better for institutions