There's a reason security through obscurity doesn't work The even worse part is, it isn't even obscure! The path is /admin/ not /walrus/ or something. And why

There's a reason security through obscurity doesn't work The even worse part is, it isn't even obscure! The path is /admin/ not /walrus/ or something. And why would they have plain-text php files at that URL? It's like shooting yourself in the foot and lighting yourself on fire in a bear pit at the same time.