I think Proxmox does a good job of managing its own logs. However I think the logs are copied between all nodes, so 4 nodes = 4x the log files. Also, there is an implicit trust relationship between all nodes, meaning that a credentialed user on one node could destroy the logs on all nodes.