An application displays the error message 'This email is not registered with us' on the login page. Why should this be changed?

• A.It leaks the database engine in use: the message format differs between MySQL and PostgreSQL so an attacker can fingerprint the backend. The text should be replaced with a generic server error page that gives no detail about the stack
• B.It breaks accessibility: screen readers announce the message twice since the field label repeats the same text. The wording should be shortened and moved into the form label itself for assistive technology users during sign in
• C.It enables user enumeration: an attacker can confirm which email addresses are valid accounts by systematically testing addresses. The message should be identical for wrong email and wrong password: 'Incorrect credentials'
• D.It encourages phishing: users learn that the site reveals account status which lets attackers write targeted emails and links. The message should name the support team rather than the sender