I think it's unfair to say that Coinbase has effectively "gotten lucky" in not being hacked. Security by obscurity makes sense when you have a low traffic low s

I think it's unfair to say that Coinbase has effectively "gotten lucky" in not being hacked. Security by obscurity makes sense when you have a low traffic low stakes site, but a place like Coinbase can't rely on that. They are a huge target, they have to take into account the possibility of disgruntled/bribed ex-or-current-employees abusing their knowledge of CB's security systems. They host coins like Monero and others which can obscure where the money is sent.