Currently, messages from Magic-Folder's status API are being captured by logging.debug, causing them to be printed to stdout (in the event that users run the application with the --debug flag) or buffered into a python deque (so that they can be inspected/viewed by the "Debug Log Exporter" UI). Given that these messages may contain sensitive information (such as capabilities or the relative paths of files/directories handled by Magic-Folder) extra care should be taken to either redact them appropriately (e.g., using methods employed by filter.py) or dropped entirely (since API messages are generally not intended as log messages).