I only stay logged in as root on my personal server. For more public servers I of course disable password logins, ssh in using a key file, etc.

(I wonder what about my post makes you think you should talk down to me and make (incorrect) assumptions about my approach to security?)