Wazuh can improve security without surrendering endpoint telemetry to a closed vendor, but only if you control what it logs, who can access it, and how long the data lives.