I'm not sure what the uses cases are for multi-auth that are satisfied by shipping keys around. If you have a third party to store N keys, why couldn't they store just 1 key?

That is, if your model is that an intermediate collects keys and then signs, wouldn't it be strictly better to give the intermediate a single key and collect authorizations (signatures) instead? (I guess the intermediate could lose the key in this case.)