As someone who works in the edge networking side of things you are not being paranoid. Logging all web activity is extremely common. Some industries require it even if the powers that be in the company don’t want it, and it might surprise you on which verticals require it (education providers are a good example).