Vaults are hard too. And the operational requirements to actually use them effectively are much more onerous: if you're not monitoring your vault periodically, what's the point? Multisig meanwhile is fine with true cold storage.