If making things in the open was more secure, everyone would post their tank designs online.

Instead they court martial anyone who talks about the designs. Because obviously, telling everyone every aspect of your security isn’t actually more secure. How would you know how to do a 24-step process to exploit something if you have no idea what code is running on their server?

Imagine trying to build a cheat for CS:GO if you had no access to the game and could only play it via a remote connection. Good luck.