The point is that ATMs shouldn't be proverbially taping the proverbial spare key to the underside of the proverbial desk.

A well-designed system can withstand the attacker knowing all of its details aside from the secret key chosen by the owner. That's the whole point of avoiding "security through obscurity".