pull down to refresh

Ideally, they wouldn't know what the other parties are. The purpose it to simplify access to your funds in a secure manner. Single-sig is obviously out of the question. Having HW seed signers at home is weak against fires. Having HW seed signers distributed in several locations is slow and costly.
What do you suggest?