I do it by just encrypting the nsec with a pin and saving it to Google drive. This way with Fiatjaf's package has the issue that if the signers or offline, or abandon the responsibility of being a signer, users won't be able to login. Of course everyone on nostr hates how I do it

You're smart and your ideas are good. I'll look into this too.