Actually your post clearly makes the point
that there is security through obscurity.
If you didn't know this tool existed, you couldn't use it could you?
I run a well known website. People are always knocking on the doors. All the well known doors.
Since I am a grumpy curmudgeon, who doesn't trust 'frameworks' and 'content management systems' none of those doors actually exist.