In most cases attackers can use the signup flow to see if an email is registered so as long as it isn’t less protected (with a captcha etc) it isn’t any more of

In most cases attackers can use the signup flow to see if an email is registered so as long as it isn’t less protected (with a captcha etc) it isn’t any more of a privacy leak in that regard.