How to validate the change address in a multisig transaction?
I went and RTFM and found a sufficient answer: Using the proper change-address descriptor for the wallet, I called deriveaddresses and I see the corresponding change address returned from bitcoin core.