[CentOS] should vsftpd be disabled in favour of sftp for security reasons?

On Fri, 2010-09-17 at 05:51 -0400, Robert P. J. Day wrote:
> (another in an ongoing list of things i just want to clarify for the
> sake of future courses taught on centos.)
> 
>   from this RHEL doc page:
> 
> http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Deployment_Guide/s1-openssh-server-config.html
> 
> the reader is advised to, for the sake of security, remove/disable
> vsftpd, ostensibly in favour of sftp/sftp-server.  really?

There is nothing wrong with locking it down in Read Only file
structures.

John