Security should be built in from the ground up. It's not an afterthought. If you're not doing that, you're not doing it right. I get that there are time constraints but you should factor that in when giving your estimates.
You shouldn't use discover for anything other than flatpaks on Arch because it doesn't allow manual intervention which is sometimes required on Arch. It can even leave you with an unbootable system.
My Willow drools when you fuss her behind the ears and her teeth are fine. Some cats just drool.