Hacker News Reader

Is GPG security through obscurity, since it only relies on you not knowing my private key?

Yes, if you use that private key to serve as an unauditable 3rd-party trust authority in what should be a single-party or two-party transaction.