Having tried it myself, I can highly recommend a security posture that doesn't depend on the secrecy of any particular URL :)

Ah yes, that old chestnut again. Because there's only ever one way to secure anything, and defense in depth is apparently meaningless. Comments like this are not helpful.