MPC or multi-sig is a pretty good solution, you can require a 2/3 sign off from different custody solutions (ie. a hardware, desktop, and mobile wallet)