> But who needs SSO logs?

You don't. Without logs, there is no compromise.