URL shorteners make ‘hidden by obscurity’ pages public.

Link. Duh! Just realized this. Since URL shorteners are short strings, easy to walk all combinations even if they aren’t directly exposed. So use of URL shorteners makes Google-type long key URLs effectively public.