Exception messages exposed to users

The following discussion from !35477 (merged) should be addressed:

• @mkozono started a discussion: (+1 comment)

  question: I think I heard about a security issue recently because exception messages were passed through to users. Are we definitely sure this is what we want here?