I wrote a deeper technical breakdown of these specific risks and the math behind the "recovery black hole" here:
https://frozensecurity.com/blog/the-hidden-risks-of-using-a-...
TL;DR: Unlike your 24-word seed, a passphrase has no checksum. One typo during setup means you are sending funds into a cryptographic black hole. Digital security is useless if you fail at physical resilience.