Your encrypted data is already protected by a key in your secure element, which can only be unlocked with your PIN/password. So your password acts as your passphrase in the Before First Unlock state.
It's a similar concept as a TPM2 token PIN, if you're familiar.