Relying solely on security by obscurity is an extremely sub-optimal method of guarding sensitive data. It's better to be safe than sorry in every instance when it comes to private information imo.