Building a secure system is a thankless, near-impossible job. To win, you have to get every detail perfect, and make absolutely no mistakes that anyone anywhere can find.
Breaking into a system is exciting, high-adrenaline, and easy. To win, you just have to find one mistake, and the whole system crumbles at your touch.
ssh+2FA to all your machines, anywhere, without opening firewall ports.