[_pne1]

Security reasons, the more ambiguous you can keep it, the better it is for keeping bad actors away.

Same reason almost all sites don't tell you whether it's the email or password that was wrong when you create an invalid login attempt.