Author seems to think that security from obscurity helps while in reality it does not, neither doesn't have given a thought about putting something in front of

Author seems to think that security from obscurity helps while in reality it does not, neither doesn't have given a thought about putting something in front of HA like nginx if they want obscurity. With their principle anything should not be online