I often use "AuthenticationMethods publickey" which would disable all authentications except public key.

Isn't this safer than "PasswordAuthentication no", even if it's a different setting?