The first 2 things that come to mind: Whoever can connect, can log. Even though an authenticated user's host may be masked, in the server logs they might appear

The first 2 things that come to mind: Whoever can connect, can log. Even though an authenticated user's host may be masked, in the server logs they might appear in plaintext.