Most interesting question is how honest members of quorum will reassign ledgers to re-gain control over "stealed by operator" funds; need they vote majority? such as 3-of-4 or so? (as far as I understand you, it will be multi-signature to protect against "one-sided onchain transaction"?)
Also, what if "random quorum member" (the one to which quorum gave the reservs to) will goes bad?
Also, need operators & quorum members to run a full node?
(sorry if too many questions...)