The striking thing about ssh to me was always its use of TOFU (trust on first use). This is one of those things that sounds really janky and weak, but is in reality unreasonably effective because it avoids the maintenance, and dangers, of central points of failure.