I am told that SSH _doesn't_ roll over and spill everything for no reason with bad host keys on public key auth.
That is very good news.
https://github.com/jtesta/ssh-mitm/issues/14
That's a good reason to prefer public key auth to password auth in SSH.