Hi Mark,
The Active/Passive setup looks fine and is as per the concept of NSRP. Your statement that the failover works seemlessly actually confirms it too.
Regarding few packets seen on the snoop of passive device interfaces, PADI's being broadcast, they are expected to be seem.
Regards,
Pradeep.