Move services away from known ports and don’t use ports that end with well known port numbers (22,80,443).

Moving ssh from 22 to 2222 or 443 to 10443 does nothing. You have ~65000 ports. Pick something random like 6744 or 2458

Changing ports does nothing except reduced log chatter.
Security through obscurity is not security

Moving ports does help. It is not a sure thing but when used in conjunction with other security mechanism can help get rid the of the low hanging fruit of scriptkiddies and automated scans.

Security by obscurity is no security.

It is if you are defending against automation.

It defends against the lowest level of automation. And if that is a legit threat in your model, you are going to have a bad time.
It’s just going to trip you up at some point

I’m not saying it should be your only defense. I’m saying that changing defaults is a good idea for secure systems.

For instance, you should change the default WiFi password on your router.