if it didn't we wouldn't be using passwords ...

Passwords use secrecy not obscurity. The difference is obscurity is discoverable via public information.

Think a captcha which is just “please type ‘5371’ in this box.”

Basically, benefiting from an unusual protocol not a hidden protocol.