> For example the default firewall configuration leaves the SSH port open and the number of failed login and sudo attempts before a timeout has been unnecessari

> For example the default firewall configuration leaves the SSH port open and the number of failed login and sudo attempts before a timeout has been unnecessarily increased. Leaving SSH exposed is bad if password auth is enabled. Otherwise, under what threat model is either of these a problem?