[dx87]

One reason is because setting it to a random high port allows non-root users to turn on the SSH server if the admin turned it off. Probably not super likely to happen, but it's possible.

[bch]

It doesn’t need to be on a random high port, just not port 22. 222, for example.