So if I edit my
/etc/ssh/sshd_config file, there's a thing
PermitRootLogin where you can turn off root logins.
However this also means I can't use file uploading services like Filezilla because of permissions errors since I can't call "sudo" from Filezilla from one of my non-root accounts.
So, one alternative is to leave root logins on.
If my password is very long (32+ characters) and very high-entropy (lower-case, upper-case, special symbols, numbers, etc), won't this thwart brute force attacks entirely? Is there any risk to leaving root logins on otherwise?