There is a certain danger with obscurity in it can obscure to your own vulnerabilities. I believe this is most well-known with crypto, where essentially any pro

There is a certain danger with obscurity in it can obscure to your own vulnerabilities. I believe this is most well-known with crypto, where essentially any proprietary crypto algorithm should be assumed to be broken (because crypto is just that hard), but it applies to all forms of security. To put it another way: public (and popular) security measures have the benefit of having been validated by many eyes. When you choose proprietary security instead (which obsurity requires by definition, otherwise the technique would be known), you're betting that your own security team can do better. Is that a bet you can sometimes win? Perhaps, but I personally wouldn't want to bet too hard.