I disagree. Cold storage is the only way to provide full sovereignty.
L2, as of now, requires a hot wallet. That is not secure against a sophisticated attack. The protocol could be, but not individuals.
Multi-vendor multi-sig in cold storage fixes this.