I would trust it solely either. Maybe you could use it as part of a multi-vendor multi-sig setup?

nostr:note1jw76vh77r0eyh42vtqmp8af6z9mdm36muretjjv6aqqajtrljs5s0ar375