This is not a particularly thorough article overall and is made worse by the overly ambitious title. It basically starts with "ssh has problems" and moves imme

This is not a particularly thorough article overall and is made worse by the overly ambitious title. It basically starts with "ssh has problems" and moves immediately to "use an arbitrary separate tool" to solve them. But it doesn't really go into depth on or contrast against any alternatives such as built-in facilities like SSH certificates or various third party options like Amazon SSM, Teleport, Tailscale SSH, "normal" bastion hosts, etc. Truly "Hardening" SSH involves a more robust set of options and bigger toolbox than this article suggests. In particular the bar is very high for new tools in the ecosystem and BastionZero. I urge readers to know how high the bar should be for deploying solutions to SSH and system access ecosystem and to be skeptical of anything they read as magic solutions or that lacks an established pedigree. If nothing else, a good first step is searching HN for proposed solutions to see if this community has discussed it.