We just bricked a SSH-only accessible machine by installing the gdm3 package. Why is that possible? As the OP already said even an active SSH connection does not stop suspension. This is a prime example of bad defaults.