The passphrase is not an additional layer of security, but it certainly slows down the movement of funds by an attacker. Thank you for the challenge you are issuing!