Several sites do that. When I asked why, the response was that it's a security feature to keep accounts with passwords that may have been compromised from being used.
Too many people still don't use unique passwords never mind 2FA so if you find a password for
joe.slob@erewhon.net, the chances are good that it will work for most sites that Joe has an account on.