I agree on the "obscurity" as a complementary layer, I never understood why so many people want to look at it as a bad practice!

Security at its most robust is done in layers.

Also, who the hell wants tons of bots probing port 22?