Sanctum’s wallet update shifts the security conversation to “how to recover.” For multisig to move into consumer applications, experience and permissions must be considered together. ① Sanctum has announced its 2-of-3 multisig setup: device key, cloud key, and email recovery key are stored separately; any transaction requires two of the three keys to authorize. ② Built on the Squads smart account, the recovery key is protected by Turnkey infrastructure. The design aims to mitigate risks from a single key being lost or compromised, but users must still complete the required upgrade and key generation process. ③ The most valuable question, in my view, is: what can users actually do if they lose their phone, experience cloud account issues, or suffer an email breach? Clarity and verifiability of the recovery process directly impact long-term usability. ④ Three keys do not automatically equate to three independent risk sources. If email and cloud services share similar login and recovery pathways, risks may still be correlated—multisig cannot eliminate malicious authorization or human error. My perspective: Consumer-grade wallets must make security understandable as a clear, intuitive process. I’m willing to continue following this path, but I’ll first evaluate the default signing combinations, recovery permissions, and exit mechanisms before deciding if it suits me. Once the experience is smooth, users must still understand which controls remain in their own hands. @Solana_zh @solana @sanctumso @multisig @turnkeyhq