Multisig reduces total custody loss risk

Splitting custody across multiple keys reduces a holder's total risk of losing funds, because no single key compromise or single point of failure can move the coins.

For (strongest version as argued): Multisig is not only a governance tool for groups. A single person can hold several keys stored in different locations, which converts a single catastrophic event — a fire, a burglary, one compromised device — from a total loss into a survivable one. It diversifies the failure modes rather than merely hardening one of them, and it addresses the consideration the notes call most often overlooked: survivability, meaning whether funds remain available if the key holder is incapacitated or dies. A quorum scheme lets an heir or a co-signer recover without ever handing anyone unilateral control while the holder is alive.

Against (strongest version as argued): The same source supplies the rebuttal, and it is about human beings rather than cryptography. The notes record owners who implemented an elaborate series of encrypted backups in an effort to prevent theft and thereby created a loss risk out of the complexity itself — the balancing-risk problem. Every added key adds a thing to record, store, back up, test, remember and eventually explain to someone else. Theft risk falls; loss risk from procedural failure rises. Which effect dominates is a property of the specific holder and scheme, not of multisig, and a quorum whose recovery path has never been rehearsed can be strictly worse than one well-kept key.

Nuance: "Total risk" is the contested term, because it sums two risks that move in opposite directions as keys are added: loss by theft and loss by the holder's own error or death. Most stage arguments quietly optimise only one. The survivability question is a third axis again — a scheme can be excellent against theft, adequate against error, and still leave an estate unable to recover anything. The useful question is never "is multisig safer" but "safer against which failure, for a holder with what capacity to operate it." This entry rests on one owner-research file with no external corroboration and has not been cross-checked against a primary source — it caps at CONTESTED for that reason (corpus/INGEST_PLAYBOOK.md). See multisig-basics and hardware-wallet-protections for the established mechanics.

Common misstatements: "Multisig is strictly safer than single-sig" (it trades theft risk for operational-complexity risk; the source records the latter causing real losses). "2-of-3 solves inheritance" (only if the recovery path has been documented and tested — survivability is a separate design problem from the quorum). "More keys means more security" (each key is also another thing that can be lost, and the notes' own anecdote is about exactly that overcorrection).