Split signing authority across three vendors, back up the descriptor, and prove recovery with Bitcoin Core before the wallet holds serious money.