Is it safe to display headers like Authorization?

Yes. The plugin hides the actual Authorization header value and shows only a placeholder for security. Only users with the manage_options capability can access the logs.