While upstream SSH has disabled password logins for the root user as their default configuration the past number of years and that has carried over into being the out-of-the-box behavior for many operating systems, Fedora continues allowing password-based SSH root log-ins by default. But with the next Fedora release they are thinking about changing that default behavior…
Source: Phoronix – Developers Start Debating Whether To Block Password-Based Root SSH Logins For Fedora 31