This is why you must use a multisig that's actually disjointed.

If it all goes to one password manager, then you just have a single sig with complications.