"though nobody in reality should be using openssh from pkgsrc" ...why not?

Hey, I live in reality! >:(

xmerlin: because we provide an up-to-date openssh in the platform that has a bunch of integrations that the vanilla pkgsrc one does not

sometime you cannot update the platform but you can update the single pkgsrc package

each to their own, but it's not something we recommend

If you have 200 zones on a server, it's sometimes not easy to schedule a platform upgrade because it brings fixes but sometimes also bugs, and it's necessary to conduct tests outside of production. Updating a package is simpler and fixes a 0-day bug in an instant.