the xpubs can be put on google drive, emailed to yourself, etc etc. make infinite copies and put it anywhere. so while you do HAVE to have all 3 xpubs, i can’t image a scenario of someone knowing that, and losing them. not knowing you need all three, and then losing it, 100% see that happening. so yes, don’t do multi sig if u don’t understand it