I agree. First thing I always do when I configure SSH for a new server is to disable root login and disallow password authentication. SSH keys only - and hope everyone protected their SSH keys with passwords :)

Obviously, make sure you don't lock yourself out, lol