Repeating magic phrases doesn't accomplishes much without understanding.

If you make something really secure and then you hide it really well, that's better than just making it really secure.

Just don't replace making it really secure by hiding it, is what that phrase says.

It's like moving an sshd away from port 22; doesn't make your sshd implementation magically more secure, but it immediatly gets rid of a mass of autmated naive ssh port scans. So you need a solid implementation still, but the obscuring part certainly helps.