Neither did Log4j in basically all cases, some maniac just put arbitrary code callbacks into their logger, undocumented and enabled by default. The insane part isn't the feature itself it's the fact it's enabled by default in a logger of all things.