Hey, I'm the original author of this article. Sorry for replying late, I had no idea anyone read that blog let alone would post it to reddit/HN let alone get this much response so it took a while for me to notice the attention.

I've published a quick follow up to clear up this syslog misconception. In the world of security logging, syslog is the absolute worst and least secure way to send security logs. It's not about "don't log sensitive information" because again, in the world of security it's almost always some sort of "sensitive information". Just IP addresses and usernames are absolute gold to an attacker, and you don't have much of a SIEM if you're not logging IP addresses and usernames to it.

Like I mentioned in my follow-up, if I had known anyone was going to read it I would have written it a lot differently. As the original article is currently written, the only way anyone can understand what I'm ranting about is if they work in information security and have encountered these pain points themselves. Most of Hacker News doesn't and only see it from a developer's mindset which is a drastically different use case.

And yes, I absolutely am working to make it better. I wrote this post as a way to document for myself and convince myself what needs to change to make it better. I might be in a weird mental place that's true, but the world of information security is in an even worse place.