> Behind a long unique uuid looking url which provides some measure of security by obscurity That's not security by obscurity. If the "uuid looking" part is g

> Behind a long unique uuid looking url which provides some measure of security by obscurity That's not security by obscurity. If the "uuid looking" part is generated using a csprng and has enough entropy, it has the same security properties as any other secret. There's other issues with having the secret in the URL.