pull down to refresh

The trust assumption is pretty narrow here — you're only trusting the co-signer not to double-sign. That's auditable. My question is what stops co-signer centralization if merchants start only accepting one or two services.