except in this case, the attackers figured it out ages ago and everyone else was left in the dark.

The issue with obscurity is that attackers inherintly have a far higher incentive to try and understand obfuscated, undocumented messes than security researchers.