I'm not so sure. Yes, ideally that wouldn't be the case. But there are still weak ciphersuits available by default. (SP 800-63B isn't really relevant to whether

I'm not so sure. Yes, ideally that wouldn't be the case. But there are still weak ciphersuits available by default. (SP 800-63B isn't really relevant to whether NIST curves are safe or not.) Another benefit is the SSH logs now fill up with cipher negotiation errors instead of failed authentication attempts, which stops automated "attacks" quicker and makes for cleaner logs if trying to parse for meaningful authentication attempts.