It’s not that it does NOTHING to improve security… An 8-character password with more options per character IS more complex (and in that sense, secure) than one with fewer.

It’s just that adding more characters (e.g. in a passphrase, as per your example) also increases complexity, and is more usable.