multisig 2/2 with different hardware manufacturers is a sweet spot not making things too complicated..
two of two single points of failure though.