Actually, you can set the permissions for log files now. See https://caddyserver.com/docs/caddyfile/directives/log#file
Do you know if Caddy can self update or if is there some other easy method? Manually doing it to get the cloudflare plugin is a pain.