[reificator]

> What is your home address and phone number?

Neither of those are security systems. That's like asking for their password and claiming you've proven security through obscurity.

The idea behind dismissing obscurity is that if everything but private tokens were exposed, your system should still remain secure.