If your OS distributor screwed you that badly (and a short check should be sufficient to determine if they did if the distribution is popular!) you’re deeply screwed anyway. And there is nothing post-facto you can do from within that distribution.
I reckon on average a distro ssh maintainer is more aware than an average end user following a hardening guide, even with mistakes like that one.