[petsos]

Look at it a different way. If a bug was found that could kill sshd, then a local user could replace it.

[stedaniels]

Anything connecting to this replacement sshd would immediately be spotted as fraudulent due to keys.