Yeah, along those lines we have requirements on never logging PII, and not logging anything that potentially contains PII, such as folder names.
ie `$HOME`/.config/foo/stuff.cfg` rather than `/home/joebloggs/foo/stuff.cfg`?
Obviously that depends on the messages being infrequent in production logging levels.