There is a flaw in the current merging process. When two records are merged, the Timeline for the previous records is not kept in the new one.

This is an auditing loophole as one can bypass the Timeline audit log by simply merging a record.