You cannot buy any shitful product and just because it is labeled"hardware wallet" expect it to have security.
At least it should be more secure than web wallet

Also...what if I forget or lose the passphrase?
You lost your coins forever, unless you backup your mnemonic/backup words.