Comment by denysvitali

I don't agree with the arguments of the author: you can still use a Yubikey (or multiple Yubikeys as a backup) - which is a far more secure option than letting anyone on the internet guess an authentication factor that can be easily cloned (password).

No matter your solution, but exposing password-based SSH on the internet is a very bad idea IMHO