IMO protection is to allow OC members to be a part of multisig, we can not meet every person IRL or ask him to pass KYC to handle responsibility at this, what if bad guys will come to CC members houses, we can not trust, but verify, as for me I can trust only @tromp.