Disable SSH doesn't actually disables SSH, it just hides the information from the user ui, this is a big risk to brute force and also if the user had a plan with SSH, and then upgrades to a non SSH plan he cans till connect with the password he had or the ssh key.
The ssh when disabled should be blocked not just hidden from ui
