Being distributed and signers being anonymous are two different things.
Users will choose the more trustworthy exchange. Conceivably “Your money is handled by anonymous people elected by anonymous shareholders” does not sound all positive to all people. Having some publicly known signers, who have reputation at stake in real life, from a wide variety of countries might be better.
Realistically I am not sure most posters can hide their real IDs if governments decides to find out. Hiding identity will however help reduce being attacked by hackers of the garden variety.
If the signer is honest and having signer’s private keys compromized is the main concern, why can;t the B&C
signer software lock out the owner once it is started? For example after it is started, the signer software kills sshd and publishes a random generated key and use it for signing. The owner is honest and won’t put trojan/back door in the system so that she/he can only reboot the server and start another run of the software (which will update the keys), but will never have access to the private key – there is no key to steal from the human part of the system.
