I rely think that a passphrase is a non-negotiable in all of these cases. It's a simple level of security that closes so many attack angles.