I like the multisig idea. I don’t know a lot about the tip jar technology of the Lighting tip bot, but using the jar as a front end with something like a 3:3 or 5:5 multisig to direct the funds would be pretty secure and trustworthy in my opinion. Being on layer 2 definitely changes things since its off chain, but we have ways to still be transparent other than on chain activity. Good suggestion!