Does it make sense, in Linux, from a security point of view, to log into a remote machine via SSH through a user, and then work as an admin via su?

Question

linux

Does it make sense, in Linux, from a security point of view, to log into a remote machine via SSH through a user, and then work as an admin via su ?

Answer 1

Certainly.
All are breaking down on the root. and if you do not include the ability to log in as root in sshd (it has been disabled by default for a long time), then brute force is not terrible.
And in order to log in under any other login, the attacker needs to pick up not only the password, but also this login. And even if successful, the attacker enters the system as an unprivileged user.

Answer 2

Of course have. This is an additional line of defense.

Answer 3

Port-knocking is the best port protection.