What's the recommended setup for or against raids?

Sorry, can you give me some more information on what you mean here?

A common thing these days are LE raids of some fellow Bitcoiners in the name of money laundering, unsolicited money trabsmisiion, tax evasion, ... In that case you don't want your device easily penetratable or your seed lying around. You need a passphrase (at least) but also need to take care that your loved oneschve access inncase of death or severe illness. Maybe also some geo-mjltisig and some plausible deniability setup. Would be nice to see some scenarios to stay safe in one of the most adversarial setups.

once I have more money Imma buy one

Does Passport allow for 13th and 25th word wallets? Such as Trezor's "hidden passphrase" function?

Yes, Passport does support Passphrases.