Trezor and the pass phrase feature. How does it work exactly?

I have a Trezor. I use it to store and link to wallets such as Metamask. I currently stake ETH and hold Reth on my Trezor linked through the Metamask.

I’ve put all of my funds in a pass phrases wallet online the hopes that in the event of my seed somehow being compromised then a would be hacker would also have to figure out my pass phrase.

The way I understand it, a pass phrase creates a new separate wallet and so in theory I could have multiple wallets within my one Trezor. I could theoretically have 100 pass phrases accounts each holding 1% of my portfolio so in turn reducing my risk of being compromised.

Is this correct? If someone did get my seed for my Trezor would each pass phrases account have its own unique layer of protection?

If this is the case, why would anyone want to own multiple Trezor wallets?

Bonus question. If someone got the seed to my Metamask wallet which is tied to my Trezor which is pass phrased. Would the attacker have to get my Trezors physical sign off to conduct a transaction?

Thanks ????