Security through obscurity is not the best of strategies. If someone notices your shoulder surfed password doesn't work with qwerty, it's a trivial step to try it on dvorak/colemak.