I think the Coldcard incident proved that the singlesig era is coming to an end. The tools used to successfully execute that attack will only get better, and trusting a single vendor with my stack just isn't something I would personally do in today's age. Multi-vendor multisig is the answer for anyone wanting to self-custody now. I work at @CasaHODL and will always advocate for the service because it allows you to be sovereign while still having somebody there every step of the way for setup, inheritance and ongoing support. Many are technical enough to run a DIY multisig, and that might work for a lot of people. The point here is that the risk is too high now to trust a single vendor when the tools are available to spread that risk across vendors in a way that any sort of attack or device malfunction to one or even two keys doesn't result in loss of funds.