See FAQ:

Dark Skippy - FAQ

A powerful method for a malicious hardware wallet to leak its secret keys.

24 words needs twice as many signatures as 12. 24 words with strong passphrase needs twice as many as 24 words without one.