+1 this seems like a GDPR/CCPA nightmare when it comes to potentially spewing user data into logs.