

root is a user account that has all privileges and is what bots are programmed to probe, so exposing it introduces unnecessary risk. IMO there’s no reason to permit root login via ssh in any circumstance, ever, in all cases, absolutely.
For all the people thinking, “well the world doesn’t work in absolutes, there’s always a special case!” There isn’t.
If a user needs to use elevated permissions, there are many ways to do that without exposing root. sudo(8) is one way to do that.



Here’s mine : )