What's the recommended setup for or against raids?

A common thing these days are LE raids of some fellow Bitcoiners in the name of money laundering, unsolicited money trabsmisiion, tax evasion, ... In that case you don't want your device easily penetratable or your seed lying around. You need a passphrase (at least) but also need to take care that your loved oneschve access inncase of death or severe illness. Maybe also some geo-mjltisig and some plausible deniability setup. Would be nice to see some scenarios to stay safe in one of the most adversarial setups.

Does Passport allow for 13th and 25th word wallets? Such as Trezor's "hidden passphrase" function?

Yes, Passport does support Passphrases.