Lesley Carhart 
One of my favorite modern cybersecurity design things is when something on the server side authentication fails instead of your actual credentials / MFA, but the failure error message is identical so you spend an hour doing resets and second guessing yourself only to have everything work perfectly a little later on.
SpaceLifeFormInformative error messages are worth their weight in gold, as long the user can see them. It does no good to just log them if the user does not have access to the logs.