You can always break append only logs, the point is, it's detectable.
What do you mean by detectable in the context of Git-as-append-only-log?
Mirrors that pull down the version with rewritten history will not be able to run a fast-forward (because they will contain commits that are not in the upstream version), and will loudly complain.