CISA supports Microsoft removing the "logging tax" from Office 365 auditing because it means administrators can help track down malicious actors like Storm-0558 easier.