I found that in 4.7.0 there is a toggle to disable Luci which is good as it doesn't have brute-force protection. If i need i enabled it then instantly disable to prevent brute-force.
I wanna see simmilar toggle for SSH. It is also not protected from brute-force and many users will never use it. So when it is necessary: user can enable it, if not disable.
Also, it will be extremely helpful if there will be option to automatically toggle it off when session ended (if this is set in settings by user will)