RT @cperciva: Is it wrong to use a log4j exploit as a password?

I mean, passwords shouldn't be coming anywhere near logging code... right?