You dont need to use cpanel Chaging ssh port is good for bots but still easy to find the ssh port Blocking ports not in use is good Turning off root access? Not nessassary but you can use ssh key instead of pass
Cpanel is not the only secure panel out there. interworx is just fine also