Or use something like SeedHammer (are they on #bitcoin #nostr ?).
it splits the Xpub into multiple parts.
E.g. 2 out of 3 multisig with 3-part Xpub, 1 share on each plate so also any 2/3 plates can recreate the Xpub.
You can safely deposit such a plate at a 3rd party and they have neither access to the addresses nor the keys.