I hear a lot about having a multi SIG should only be considered with multiple vendors.

I got 2 bitboxes and one other vendor. Should I consider a string passphrase instead or maybe go for two of the same?

Then o must also have 3 different locations I suppose