Speedfusion connect protect and Speedfusion connect 5G/LTE difference

I am still kind of confuse on Speedfusion Connect protect and Speedfusion 5G/LTE.

Can I confirm that in SF protect, we still need a physical SIM card inserted into the supported device in order to established an backup link through the SF cloud device. As for the SF 5G/LTE, we do not need to insert any physical SIM in the local device, the plan will cover a remote SIM to be assigned to the local device base on the usage plan purchased. Is this understand correct? Of course we need to ensure there is reachability from the local device to the SIM cloud.