@bazkie You'd be surprized. I did an app test about 15 years ago where the user registration page did error with "this password is already in use", but it didn't actually dox the actual user lol.
@i0null@bazkie I was a TA for a databases class and one of their assignments was an ecommerce site. One group did exactly this and I was like seriously guys?