I didn't because the Pi Imager (advanced dialogue) has an option to do that when the SD is written, and that part does work, there was a live SSH daemon, just that the credentials were rejected.
When I re-wrote the card without using the advanced option, yes I had to enable SSH that way.