One commenter on a previous iteration of this argument said that moving the port (not port knocking per se) made the access logs quieter, and that was reason enough for their use.

Edit: heh, same thing is going on a few comments down :)