(trying a second time.. sorry if this answer repeats)
It's 1 of n operators for *liveness* of exit. But the 1 of n honesty is only on the signing committee at setup, for covenant emulation. There's n...
Ah, my recollection was that only a fixed (large) set of parties could challenge the withdraw with the fraud proof, so it was also a security assumption, but maybe that was BitVM v1? The nice thing about the BitVM machinery even in that model is you get 1-of-N liveness *and* 1-of-N security which isn’t possible with a multisig.