Passphrase / durress pin is definitely a good feature. But I do think having a device where the seed is not extractable with physical access is a must have.  

 I don't see how that would ever be possible without going all the way to a brainwallet