Hi

The issue is most bots setup instructions include adding them with tons of privileges including admin even if they don't need it. Then they get private channel access and can log those. This is not really apparent to most (non-engineering) people.

I think bots that can read messages, should always be self hosted instead of some random 3rd party.

Most bots just post updates and responds to commands. / Is the way to go.

So? Don’t install the bot if you don’t like the idea of them doing that.

That entire thing experience might be slightly different from actual log dumps