What exactly is the mechanism by which you think that an SSH RCE is "simple"?
Not OP, but agent forwarding is a significant concern.
Not OP, but agent forwarding is a significant concern.