I'm having a hard time wrapping my head around all scenarios, so I'll only respond to this one now: if both Alice's and Bob's passphrase are needed for all wallets, you have no fail safe if either one of them can't reprodue the passphrase. And that brings me to the next question: where are the seed word phrases for all wallets stored?