Absolute idiots

Most systems (e.g., ftp and ssh servers) stopped leaking data this way about twenty years ago. There is no excuse whatsoever for designing the login page this way.

That their 'fix' is to stop displaying names and pictures, rather than changing the underlying behavior, is yet another demonstration that they have no understanding of privacy or security.