What is a common mistake with HTTP status codes and ProblemDetails in Web API?

Returning 200 for all outcomes or exposing stack traces makes APIs hard to consume and less secure. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.