The point is you shouldn't avoid implementing best practice security because it will "never be on the network".

And quite frankly, deliberately shipping a product with gimped security, especially when it comes to OpenSSH, is kind of not very excusable and has nothing to do with "stability".