> For example, hiding the algorithm from whitehats may prevent/discourage them from hunting/reporting bugs.

Yea, this is a serious concern, I guess it depends on use cases. For sure "security by obscurity considered harmful" could be true, thats the thing people overgeneralize and fight over it when this should be weighted depending on the circumstances.