Security through obscurity isn’t security.

The classic example:

I have a website with no authentication which displays data that really should be locked down. But it’s OK because I never told anyone else the URL so no one will find it.

Unless what doesn’t boot, the KVM? Isn’t the point that this should work even if the host is not working?

As long as the host posts it should work. If it’s a hardware issue then it won’t help though.