I tested their emergency recovery kit. It works without any block hot keys being used. It’s a standalone Bitkey app APK that only works on android but it’s important to have to the app preloaded on the recovery phone so block can’t rug the app from GitHub one day.

I need to trust someone ? Who do I trust ? My stack is not big enough to pay 6k a year to unchained. Should I trust Casa for 2k a year ?

Define the trust boundary. You do not need to trust bitkey to emergency exit the multisig or to transact.