Obscurity can be a layer, but it can't be the only layer, and in general systems (such as web servers) need to be designed to withstand full-knowledge attacks. That isn't likely to be possible when it comes to anti-cheat, so obscurity plays a larger role.