Consider in your recommendations though, that a 2 of 3 12 word multisig is not using 256bits of entropy, it's using 129. An attacker had to break a 128bit key twice with 3 targets.
The best practice right now is to not have all your bitcoin in one basket, and whether you're multisigning or otherwise you should not trust one party.
