I would never use it to actually change machines though. Definitely Ansible over SSH is the way to go there.
I've mixed feelings about controlling the machines through cockpit. In theory there shouldn't be any difference between SSH and HTTPS on the security of the protocol side, but it definitely feels iffy to have a python (I think?) web app execute administration commands on a server.
I wonder what the security professionals think of it.