It's actually a security issue since someone can add PermitRootLogin in /etc/ssh/sshd_config and then override it in /etc/ssh/sshd_config.d/ later on.