Logwatch 4.3.1 creates bogus directories in /, like tmplogwatch.1460.
Created attachment 95702 [details]
patch to fix the issue; also reported upstream (without response)
FWIW, a similar fix has been merged about 6 weeks ago and appears to
be present in logwatch 5.0:
Cool, a patch is upstream, assuming this is fixed.