> Disallowing explicit `root` login makes it harder for attackers to guess the usernames (...) Technically correct I guess, but isn't password logins considere

> Disallowing explicit `root` login makes it harder for attackers to guess the usernames (...) Technically correct I guess, but isn't password logins considered bad practice anyway? So if you have passphrase protected, key-based authentication only, is it really relevant whether you have it against root or a user with sudo permissions?