@corbin.eth
I’d recommend Option 2 in the short-term and see how it’s used before deciding if Option 1 is viable or whether to build Option 3.
Option 1 with cross-app support is viable with tx monitoring and session keys to scope in limited low-value permissions per Frame. But that stack is not mature yet.