[anjbe]

If animals in nature had a defense against predators as effective as “PasswordAuthentication no”, they wouldn’t need camouflage.

[iwillbenice]

I really wish people would stop conflating reducing the attack surface with safe software default configurations. They are not the same. There is value in hiding your listening sockets/ports from the world. Anyone who does not believe so frankly has never been responsible for security beyond their laptop and maybe some random VM in AWS they SSH into.