[Jumziey]

This article is so odd in its conclusion. The problem lies in obscurity generating a mess thats hard to reason around by designers, hiding obvious weakpoints, making it hard to find the most valuable area to work on. Changing from a default port should not really count as this since its easily configurable and does not impact neither the design nor usability (unless it does). Port scanning avoidance also fills an actual function in terms of load issues.

Rather what seem to be the issue is what security by obscurity actually means and can be missinterpreted as.

Layering lots of obscurity and putting time on that when it can be spent to increase security in the actual weakpoints or/and hiding them for developers/maintainers are problematic to say the least.