I close SSH port 22 (and what I use instead)

I put my front door half way up the wall so thieves can't find it

meh, I just setup a wireguard tunnel first which is listening on some high udp port. I stopped exposing ssh to the greater internet awhile ago.