Covering up is not always technically possible. It’s easy to expose data through some unprotected end point, but that end point might still be logged, and turning off the logging/deleting the logs might be a completely different challenge.
Even more challenging if the log destination is external, and if the logging system is an entirely independent system, even potentially provided by a third party. Makes this hard to do.