The Linux hardening list lists quite some modifications but what hardening is made to SSH compared to a stock config? For Linux they summarize the list of hardened changes but for SSH I couldn't find it.

For SSH it's basically a list of default values with a comment saying "change this if you must". Some summary as to what is hardened compared to a stock SSH install would be nice.

https://github.com/dev-sec/ansible-collection-hardening/blob...

The changelogs contain a summary of actions and changes, and full changelogs go into detail.