> So it's just a matter of keeping the seed in the user's head and nowhere else. Right?

Until you enter it on a compromised system to generate a password...