multisig is a pain in the ars, i'm not going to recommend it to anyone, and i'm using it myself. it's just to easy to fuck up, and I actually ended up writing my own script to spend it because there is a bug in electrum that prevents it from finding all my hardware wallets. if you're not confident that a peraon you recommend will do this, you should not recommend they use multisig on another note, the revies problem is real and solveable. just make a revies log, where anyone can check who has looked at what lines of code with what intent and when