It’s obscurity in the same way a password or a bearer token is obscurity. Which is not what anybody would reasonably call security by obscurity, as your definition includes any use of a secret.