Tbh, it doesn't seem much different than having to watch out for not stuffing PII in logs.

Besides, with wide events, it seems possible to apply data lineage ideas and mark certain fields as sensitive and restrict access to them.