I was wondering about this the other day, is

    PasswordAuthentication no

really that necessary if a strong password is used?

Honestly, being a private key screw-up away from never being able to log in again scares me a little.