A long-running marketplace with rotating mirrors, vendor reputation that actually means something, and a dispute panel that ships rulings on time.
2-of-3 multisig escrow. Two-factor login. Rotating mirrors. XMR by default. Signed buyer feedback. Dispute arbitration.
Primary handles bulk traffic. Backups absorb spillover. Copy primary first; switch to a backup only if the challenge layer times out.