I'm really curious to hear your thoughts.
- footprint / complexity (setup and operating those solutions can be more complex than your project)
- retention (logs become too big, eg when you forget to delete them or when you're being DDoS'd)
- data privacy: you have to think about what you log. Blanket log-what-you-can approach is probably illegal and will get you in trouble if you're ever being hacked and those logs leak. Which means you have to think about anonymisation and aggregation early on.