But those daemons don’t usually have their own log writer processes running as root, do they? Instead, either the log file is accessible by the user the daemon

But those daemons don’t usually have their own log writer processes running as root, do they? Instead, either the log file is accessible by the user the daemon is running as, or the daemon opens the log file as root before dropping privileges for the rest of its operation.