One assumption in security / cryptography is that the process is always known, otherwise it is security by obscurity.

This is still better than password reuse as the plaintext doesn't disclose your other identified without further effort, however the users should be under no illusion of bullet-proof security.