I could see piping all syslog critial and above out to a .matrix printer that sits in a locked room as a cheap way to enforce a WORM log of events. With a continious sheet of paper you would only need to access it rarely, and essentially only to change the ribbon and replace the paper source.
I've seen dot matrix printers used in backrooms of airlines (which I have visited for reporting lost luggage, sometimes). This would mostly be smaller airlines (as the now defunct Berlin Air)