Probably a nice framework but if you're not using SLF4J you're toast when it also has a backdoor. SLF4J does not have an issue. Swapping out log4j for a different logging framework is a day work for all my applications at work. Not that we where using log4j we where using logback that's the current industry standard anyway.