Running a single server for a small business is hard anyway they’re occasionally going to need support.

As the first offense only seems to result in a warning, they have a chance to figure things out. Then is asking their webdev to schedule a cron job to delete logs really such a burden?