Just as I posted, I found it: https://github.com/mysql/mysql-server/commit/43a506c0ced0e6ea101d3ab8b4b423ce3fa327d0#
That “feature” cost outages during security attacks and a quite significant SaaS bill, because we were also ingesting the logs of the dying NGINX instances.