How is this not security through obscurity?

If math is STO then I would argue passwords are also STO.

It's only secure until someone figures it out.