If there is only single user then I don't see the need for using them but some people do it because it adds another layer of protection, like with Copay, you can have yourself as a co-signee on your phone. If you need one, you can use electrum.
Yes, you can essentially make your wallet 2fa without risk that the service provider can run with your coins.
the 1st set of keys is with your hot wallet
the 2nd set of keys is with the service (e.g. copay)
the 3rd set of keys is in your (offline) secure backup
Any 2 can sign. So if your hot wallet is compromised, the attacker would also need your phone (for one key from the 2nd set) or your secure backup (for one key from the 3rd set). If the service is no longer availalbe you can move the funds yourself with your hot wallet and your secure backup.