::
There’s some subtleties to it but you are basically right.
> And then I have to confirm the passphrase on the device.
This is actually protection against malware. Consider a virus that does the following:
1. you enter `HELLO WORLD` as your passphrase
2. malware changes it to `xvWa4Yb8pGh4`
3. this happens every time you open your wallet
4. one day, when your crypto stash is big enough, malware stops doing it and shows a pop-up:
„Hey, u/randombits_dev, turns out `HELLO WORLD` is not your passphrase! I know the right one, but I’m not telling you … unless you pay me 0.1 BTC. How about that, huh? Here’s the address.“
For this reason, you _must_ check the passphrase on screen and confirm that it’s what you think it is. This step cannot be safely skipped, unless you have a Trezor T and enter the passphrase on device. (and in that case it’s not there, i think)
So that leaves the „Confirm Passphrase“ in the pop-up. I _think_ this is because the popup doesn’t know if you’re opening a „new“ never used wallet, or a wallet that has some funds on it already? But yeah, given that Trezor is showing you the passphrase anyway, perhaps it would be possible to skip. I’m not sure what happens when you enter something and then click „cancel“ on Trezor when seeing the passphrase. Maybe it would be difficult for the pop-up to go back to passphrase entry or something?