I agree that changing the SSH port may not be the best example of a low cost measure, since bypassing is also low cost.

I would like to see a list of suggestions of "low cost" ways to obscure systems that are (relatively) harder to counteract. But I guess as soon as anyone publishes such a list then hackers will start checking for them.