Single Sig set up idea.

Two or three people geographically remote from each other secure a single seed.

All must trust each other implicitly - think “war buddies”

Each one’s physical security set-up for the seed is very good

Each has xpub to have a watch-wallet view on the UTXOs

Trade-offs: protective redundancy at the cost of opening up 3 vectors of attack.

Add in a pass-phrase that is ONLY memorize, never written down

Add in time-lock for additional protection.

How does this fail?