I’ve met people that think the log should be remotely stored and not written locally, since it’ll be shipped to splunk or whatever anyway.

Those people change their minds the first time a machine has intermittent network issues, and the logs needed to debug it are lost (or worse, the log buffer fills, then stdout fills, which backpressures the application, creating an outage while simultaneously eating the logs).