I agree with the general thought process here, but there is a greater leakage: no service will allow you to create an account with an email that is already regi

I agree with the general thought process here, but there is a greater leakage: no service will allow you to create an account with an email that is already registered. So all this discussion about how to handle the failed login is somewhat pointless.