Security through obscurity is bad. Security AND obscurity is fine. There's a very clear distinction here.