Thanks for sharing! Do you impose storage limits (and do many users reach them)?
Lots of logs makes sense if those people are using files and other apps such as Talk, calendar, contacts, etc. I know some admins disable News for example because it can grow to be very resource intensive across many users.
Do you have monitoring in place? Prometheus/Grafana or Matomo can be very helpful in better understanding resource usage.
Hopefully someone more technical will chime in to answer your question