I'm not sure I'd write this off because having a weak spot like this and information gained could lead to more discovery of the obscure. It's never a good secur

I'm not sure I'd write this off because having a weak spot like this and information gained could lead to more discovery of the obscure. It's never a good security design to rely on someone never finding my secret API routes that I named after my co-workers that I despised