Perhaps they consider security by obscurity an acceptable technique?