Really? They didn't consider the notion that someone might delete logs (or disable logging)? Maybe they should be using a better logging daemon...