Yes. * * Security through obscurity provides secondary security only, so it doesn't add to defense-in-depth significantly. If it can be added, then it is sligh

Yes. * * Security through obscurity provides secondary security only, so it doesn't add to defense-in-depth significantly. If it can be added, then it is slightly safer to prefer to do so. Elimination of unprivileged enumeration and internal primary key predictability are relatively more important to reduce the attack surface.