ByBit has all their keys online and calls it cold just because it's multisig?

That's not how it works