Unless someone has my private ssh key, how is leaving an aws instance open to 0.0.0.0 but only on port 22 via ssh insecure?

The ssh key would be distributed to a small set of people. I prefer to not

~ cheat sheet ~ The plural of "index" is "indices" The plural of "vertex" is "vertices" The plural of "mutex" is "deadlock"