I’ve found dictionary attacks against non-22 ssh to be effectively zero. Maybe once in awhile you get a port scan and a poke or two, but anyone able to move ssh off of 22 is not likely to have the password “p4ssw0rd”

It's a bit like the bit with the fake tan in Neuromancer.

"You think that looks real?"

"Nah, but it looks like you care enough to fake it."

If you care enough to move your ssh port you're probably not totally clueless at best, and at worst you're setting out bait.