Fun though it is to jump on the bandwaggon
That "security by obscurity" phrase, although a red rag to an infosec bull, actually reads like a comment on the status quo rather than a desirable goal. All he's saying is that the software isn't widely used enough to attract much malevolent attention, which is quite probably true.