In cPanel prior to 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-125).
cpanel cpanel