A long-running marketplace with rotating mirrors, vendor reputation that actually means something, and a dispute panel that ships rulings on time.
2-of-3 multisig escrow. Two-factor login. Rotating mirrors. XMR by default. Signed buyer feedback. Dispute arbitration.
Primary mirror handles the bulk of buyer traffic. Backups absorb spillover. Copy the Primary first; switch to a backup only if the challenge layer times out on your circuit.