I didn't wanna butt in, but I thought he was making sense in this instance. Requiring all 3 xpubs isn't a risk (ignoring privacy) since they can be shared. Maybe I missed something.