Of course, when one can just add the user account to the systemd-journal group, it is questionable why one would grant access via sudo.

and if you as a sysadmin dont know these program that you allow to execute, wellll that is a bigger problem