(though some APIs are behind logic that only allows certain calling binaries / binaries with certain signed entitlements - but I don't think logging has any)