You're missing a really important ssh setting: disable password-based authentication! However, this still won't protect you from vulnerabilities in your ssh da

You're missing a really important ssh setting: disable password-based authentication! However, this still won't protect you from vulnerabilities in your ssh daemon itself. Optimally, you would use Single Packet Authorization.