If multi-sig becomes common enough, then it would naturally become common knowledge to criminals that attacking someone who owns Bitcoin is not enough to steal their Bitcoin.

If people put their savings behind even 1 year timelocks, then it will also be common knowledge that even after you kidnap someone and get all their keys, you still can't steal their funds until you wait long enough. Long enough that police might get involved before the timelock releases.