Mult-vendor / Multi-sig is one of the answer

The controllabilty of single point of failure can be way higher