I had the same thought. Telling someone which thing is wrong, while helpful to the user, can be a security hole for hackers using brute force attacks.