Using custom derivation paths might be more effective but also more risky if you forget which one you used.
Or better: create a decoy wallet with no 25th word but your real funds are only accessible with the correct 25th (2FA). See Two-factor seed phrases.
why not use both?
and I'm not setting myself up arguing with @ek 😌