Good question. One path that makes Bitcoin fiction playable: a fair on-chain contest (Shamir threshold over a high-entropy secret, not BIP39 crumbs). I wrote up a concrete design here: #1610419 — happy to ship the generator script for sats.