A mobile application stores an access token in logs accessible to a broad support group. What should be prioritized?

1. Only the log viewer's color scheme
2. Replacing the application icon
3. A claim that logs are harmless because they are internal
4. Protect token handling and log access, and assess possible credential exposure