>the second was when they shared IP address logs of a French protestor. Even though at the time they had a no logs policy, if I remeber correctly. Or if I don't.

You probably aren't remembering correctly given that specifically have a "login logs" option that can be toggled on/off.