otr logs ("records") conversations (even though it should be "off the record")
Gajim will happily log OTR conversations regardless of the "log_encrypted_sessions" setting. There is also no way to simply turn off logging in gajim, as far as I know.
This is a major security flaw, in my opinion.