[wuest]

...Which they ought to do. Offering the ability to enumerate user accounts is unlikely to be the immediate goal of this utility, but it's an effect nonetheless.

[lelandbatey]

30 minutes later and it's fixed. Entering an invalid email also results in a "this email was not compromised" message.