I wouldn't think of alternate port as any kind of layer whatsoever. It defends against the horde of ants that are knocking on any open port 22. It does not defend against the kind of attack that you should worry about--that of a sophisticated, patient well funded attacker.

Moving from port 22 to $RANDOM will only net you annoying log bloat from things that you don't really care about.