[dedward]

This is where firewalls come in handy...

Disabling remote root login isn't as big a deal as it used to be - as others have said, if someone gets your administrative account you're pretty screwed anyway - and if they get your password for sudo, it's the same thing.

Other than that, it really depends on what you mean by cloud.