Lynis is suggesting to completely turn off SSH compression – even after authentication.
However, it does not inform users about reasons for this suggestion and does not provide a reference (say, a hyperlink) for users to find out.
Providing references to proof the plausibility of suggestions would generally increase Lynis' credibility.
(Also, I'd like to know whats wrong with SSH's compression!? :))