This is true if a system can freely be reverse-engineered by the attacker. If not, the obscurity provides an added cost to the attacker. Obscurity can actually be one of the stronger weapons in an anti-fraud solution (I used to work in anti-fraud).
Yeah like scott_s pointed out I did not consider anti-fraud. In my quick glib reaction comment I did not consider all scenarios. Thanks for pointing this out.
