There are very few people who can create proper security first, and then a sane level of obscurity to mitigate attack. It's the same as saying don't roll your

There are very few people who can create proper security first, and then a sane level of obscurity to mitigate attack. It's the same as saying don't roll your own encryption. There's people out there that could, but for the other 99.9% its false security. Generally what happens is people will use their non programmer "common sense" and think "nobody will be able to figure it out so it's good". Obscurity is something you do because you know how to properly break rules.