It seems to be an ongoing misconception in the public, that part of good security is obstification. Know of any simple clear articles I could point people to wh

It seems to be an ongoing misconception in the public, that part of good security is obstification. Know of any simple clear articles I could point people to when they make these sort of ("because Hackers might see") claims?