We have internal escrow. Our system requires signature from 3 parts of the team to unlock. Nobody can steal it from within
I'm not accusing you, but I'm just a suspicion why not use escrow. You argue that it is unreasonable to defend themselves. You and your team can work together to do that.