Insane! 
Why don't at least the companies do self custody or use a professional multisig vault service?