Don’t they though?
- I forgot my password and I want access to this site. I enter what I think is the right email
- I don’t get a password reset link
So now I automatically know one of two options: One, I entered the wrong email or Two, the site isn’t working correctly.
My options are now: try another email, or try and contact someone who runs the site.
Now with your suggestion I get an email telling me the account doesn’t exist. My options are try another email, or contact someone who runs the site. It’s the same endpoint with 0 extra steps