Still there's only one person ownes issuing account. It means all deposits goes through this person.
Yes, and I don't see any problem with that. Trusting one person is no harder than trusting a group of people (company, organization). In fact, I prefer to trust an individual. If there are a few competing individuals with their exchange buros, that's only good.
My advice would be that you issue more QORA assets as a trusted community group of persons
each having one qora asset.
Having one person handle the asset could be bigger risk.
This one person could get sick or injured or have some accident and then this
asset wont be redeemable any more.
SO if you make it like group
1 asset QORA(1) should be == to asset QORA(2)
and I think in case one person can't handle this another could take over
and redeem the other asset.