Using A as root username with Kj as password is good enough to not be bruteforced generally. People think too much about this.