I would say auditability is still security-related, but yes, this is good practice too. You should probably also make sure root has a locked password, so that

I would say auditability is still security-related, but yes, this is good practice too. You should probably also make sure root has a locked password, so that things other than SSH won't allow root login.