User generated entropy via dice rolls / coin flips seems like it should be the standard going forward, although care should be taken with this approach too. It's fairly trivial to verify that the HWW is generating the appropriate seed phrase from a given dice roll input.

Passphrases are nice for duress / dummy wallets, but they are only as good as the method chosen to generate them.