Some people would argue that a very simple daemon with fewer features might be more secure because it has less attack area.

If it's true for something like a web server, it ought to be true for SSH. Thanks for the link to spiped.