I really wish people would stop conflating reducing the attack surface with safe software default configurations. They are not the same. There is value in hidin

I really wish people would stop conflating reducing the attack surface with safe software default configurations. They are not the same. There is value in hiding your listening sockets/ports from the world. Anyone who does not believe so frankly has never been responsible for security beyond their laptop and maybe some random VM in AWS they SSH into.