We should avoid exposing specific error messages to the user unless it is an input validation error. Our tasks are currently wrapped in try-catch blocks which save str(e) as the error message which will be shown to the user. This could be a security risk.