Security by obscurity is perfectly fine when it's part of a layered approach. It will help keep attackers from learning the details of your architecture and will also stop skiddies in their tracks.
Exactly.
(Your most secure server) is not as secure as (your most secure server with some obscurity added).
This. Obscurity has too much bad press. It's not to be depended on, but it can be a useful addition sometimes.