> These days, all anybody is going to store is a salted hash so the passphrase length should be mostly irrelevant.

Since I still run into services where the "forgot password" mechanism emails your current password in the clear, this is unfortunately not as true as one would hope.