You're sending your knock over the public network in the clear. It's observable by anything in the path. And then you're not the only one that can find the keyhole.