Passphrases have footguns that have tripped up many users over the years. They are oversold and the associated risks are often downplayed IMO.