Even if all the keys are in the hands of at least two people, it cannot stop the founder from changing the key and initiating a power down. I think the best way out of all this is the integration of a multi-signature wallet, which will allow three people to authorize transactions based on an agreement.