I know a hacker could rebuild my wallet on another trezor or compatible hot wallet with my recovery seedphrase. This would get them to the ROOT of my original account. But what if I had a PASSPHRASE also? I assume they would need to know it as well to get to that account.
Also, if they knew the passphrase as well - would they need a physical Trezor to access the account?