Same vendor multisig

Can someone explain for example how insecure of would be to have 1 vendor that's compromised? I mean they would need the other keys plus the descriptor to. 2-3. Like they said remove the coldcard if you have one. Even with 2 corrupted wallets you would need the descriptor