It sounds like "3 out of 3" is too risky, as you're basically tripling the risk of losing a key (but you're reducing the risk of compromise). Something like "3

It sounds like "3 out of 3" is too risky, as you're basically tripling the risk of losing a key (but you're reducing the risk of compromise). Something like "3 out of 4" would have been a better balance, in my opinion, but I think there were technical issues in requiring such a quorum (I think I read that the encryption scheme didn't support it, but don't quote me).