On a trivial level I agree, but only on a trivial level. Most developers will not set up a server in the most secure, maintainable manner. They're going to miss important things:
- Disable password-based auth for ssh (require key-based auth)
- Enable fail2ban or similar to slow down brute-force login attempts
- Configure firewall
- Install monitoring tools, antivirus, possibly backup daemons, etc
- Setup a sane swapfile for your use case, and configure monitoring tools to alert when memory pressure gets too high
- Setup disk mounts, configure monitoring tools to alert when disk space is low, and consider a cron job to automatically clean up tempfiles
- Either set up automated updates (typically excluding kernel upgrades), or have a standard schedule for manually applying updates
...and probably other things that I'm forgetting because I'm a developer, and it has been years since I've been a sysadmin.
