splitting responsibility is also adding attack surface to my storage; relays are intended to be changed, to fail, be censored and censor. In this cases you can switch relays. They need to be treath in an adversarial way in a lot of ways. 
So I think at the total opposito of your statement 😅💜