I don’t know what you’re referring to. In my experience, the only SSH-related thing I’ve had reverted is needing to reauthorize Keychain-based access after login if I don’t automate it. Never had my SSH config become less restricted after an update of any kind.
Thank you for clarifying and glad there’s a workaround. I mistakenly thought you meant ssh out. Haven’t had a need to ssh into any Mac for close to 20 years.
If I remember right it happened without warning and reverted my key-only config when they added SIP in an update. I believe earlier updates never wiped out my change. It left me with an insecure setup that thankfully wasn't port-forwarded publicly.