Auditing the authors of an op-based CRDTs is very accessible: all the operations can have a distinct author.
State-based CRDTs don't have this property. How should a state-based CRDT keep track of the operations and authors? Ideally, this knowledge should be eventually garbage collection as the operations get older.