I see that the queries made by the managed package are visible in the subscriber org. Is that the default behavior or can I limit the access to the SOQL query logs?
The actual query being made is shown and the number of rows returned. I cannot find specific documentation stating this is expected or if all queries are visible but it has been my experience that they are shown and cannot be hidden.
To make matters worse if you are worried about debug logs, customers can log a case with salesforce to get the debug logs unhidden for a period of time without your consent so keep that in mind if you have any IP you are debugging.