What common mistake do developers make with Exception logging, why does the mistake cause problems, and what is the safer approach?

What common mistake do developers make with Exception logging, why does the mistake cause problems, and what is the safer approach? One recurring problem with exception logging is applying it without understanding the boundary it protects. Logging entire request payloads in production when they may contain passwords, authentication tokens or private user information. In addition, Exceptions can be logged with enough contextual information to diagnose failures while avoiding duplicate noise. Safer engineering approach: keep the responsibility in the correct layer, use the framework's supported API, validate and authorize inputs, avoid hidden side effects, and verify the behavior with tests.