Multi-sig for retail is great, and I use it myself. But you're held to a completely different standard in term of security and compliance as a financial insitution. And this applies to: software, hardware, operations, ceremonies, business continuity (what if the business goes bankrupt, what if country 'xyz' gets nuked etc..).