Yeah, it might read like that, but it also is how I feel. If I was running a crypto farm, or if I was doing security research, I would have different levels of concerns.

But, in fact, hosting a competitive gsmijg website, I did experience common brute force and and other types of attacks, but fail2ban did foil them for years :)

None of the attackers were ever sophisticated enough to come up with a successful attack (that I know of :))

The point is, should everything be do all the best practices as if they were equally likely to be attacked?

It’s like saying that everyone should also have a faraday cage house, and electrified fences, it is the best practice, after all.

For the record, and whatever worth - it is the (it seems, serious) conviction of here folks (and I concur) that the NSA is at least a reader of these threads.-

PS. So, hi!

PS. I'll take the negvotes as confirmation I guess ...