Yea, once the seed is exposed, the passphrase is the last line. It has to, all by itself, furnish the entropy to keep the baddies out, so it has to be a strong password/phrase in and of itself.
Most people don't think it'll ever come to that, so their passphrases are normie stuff like "My dog Smit...