Technically they could be equally as secure if the port knocking converts knocked ports into a signature based authentication mechanism ;)

But at that point, you’ve potentially introduced exploitable bugs in the network stack.