It’s not security through obscurity in this case. The filenames can’t be obtained or guessed through brute force. At least not with current technology or processing power…

Security through obscurity is when you hide implementation details.

Saying that my suggestion is security through obscurity is the same as telling that ASLR is security through obscurity…