No one is saying that obfuscation should be the only layer. Your defense should never hinge on any single protection layer.