It's rather good. You can do it pre or post passphrase on the coldcard. But obvs builds complexity layers. You could put another passphrase on the derived seeds stored on other devices. FYI I wouldn't recommend it, for what it's worth.