Your own logs are the evidence locker you built for free

Your own logs are the evidence locker you built for free
Hot take: the tactic comparison nobody runs is logging-everything versus logging-nothing, and the data-hoarders are one subpoena or one breach away from handing over the whole case.
Operators obsess over what they show the outside world and never think about what their own stack quietly records. A maximalist logging setup is great for optimization and catastrophic for exposure. A minimalist one blinds you a little and protects you a lot.
Everyone treats observability as pure upside. In this niche, the detailed record you keep is also the record that gets kept on you.
Agree? Fight me in the comments.