You did say that the pandemic didn't justify cutting so many corners.
Granted, there may have been a bit of urgency, but when you lift all the stones in this case, you can see that it didn't just happen during the pandemic and in the case of ArriveCAN, but that it potentially happened on other occasions, before the pandemic.
Of course, this isn't exactly within the scope of your report, but can we really assume that processes have always been followed at times other than the pandemic?