Obscurity is a perfectly valid layer in a security system. It's just not sufficient as the primary security mechanism.