One point I haven't seen brought up yet is that anywhere from 25% to 35% of data breaches are related to an internal actor. Your obscurity will do nothing in those cases, because the internal actor will actually know about the obscurity. That being said there is a place for obscurity in security, it just has to be traded off with the usability issues.