I think a lot of people in the comments are missing the fact that public keys are by default intended to be public. This is an explicit and intended property of

I think a lot of people in the comments are missing the fact that public keys are by default intended to be public. This is an explicit and intended property of private-public key cryptography. Your public keys are not a security boundary and setting `IdentitiesOnly` in your SSH configuration does not do anything to strengthen your security posture.