Why can target encoding leak information?

It prevents model fitting

It only works with numeric features

It removes categorical variables entirely

It can encode category statistics using labels from validation or test examples if not computed within proper folds