There is no method currently defined to forward logs to another machine, so the journal is definitely prone to a local attack wiping it out (you typically have

There is no method currently defined to forward logs to another machine, so the journal is definitely prone to a local attack wiping it out (you typically have to be root to wipe log files anyway). The only method mentioned to move logs off-system is scp or rsync or some other method of copying a file over the network, which, to me, is a non-starter. I keep logs both locally and forward them to a trusted host, just in case. I'm neutral on the binary format of the log; I can see both sides of the argument.