Ooh we've thought about blinded xpubs. Could happen. The nature of collaborative custody is such that we need to know who our clients are when it comes to co-signing a transaction.