Using a cold storage offline wallet like Electrum cold storage with a strong password is enough to keep your coins safe from hackers. You can also use multisig wallet like 2 of 3 multisig wallet. It's our responsibility to become smart as all these hacks played out and improve our wallet security by affording any error that will lead to your wallet being compromised.
You mean passphrase? Or you forgot to add both password passphrase, because that’s the right way to put it..
Yes, strong password is good against unauthorized/remote access.. Unauthorized physical access is mostly likely for cold storage setup [ not HW wallet] but it may not fully protect against physical access attack.
Sure, can’t access the wallet on spot but they can have a copy which may give them access to the master private and public key, the seed and the passphrase when they finally get through. So password is also important.