Masking email addresses in logs is not a nice-to-have. It is a defensive move against data leaks, compliance violations, and user distrust. Logs often capture raw payloads from requests, responses, and internal events. Without filtering, email fields pass straight into storage and onward to monitoring platforms, third-party tools, or anyone