What is the difference when we use `200` response status code for a forbidden page with an error message saying 'Access Denied' instead of using `403` response status code?

Are there any security implications?