Security by obscurity is harder to reason about. Heavily obfuscated code is always more insecure once the obfuscation is reversed. The other big difference is y

Security by obscurity is harder to reason about. Heavily obfuscated code is always more insecure once the obfuscation is reversed. The other big difference is you can incrementally break it; you are not going to be privy to if someone is selling your deobfuscated code online. Lastly, the example of randomising the presidential car i’d likely not call security by obscurity. Security by obscurity does not mean that there are secrets inherent to the protocol (or private keys would be obscurity!) if it was the same car every time, and they relied on nobody telling anybody, that’d be security by obscurity for me, otherwise it’s just a random value with a low keyspace