Fingerprint setup was skipping the lockout on privilege prompts
Setting up a fingerprint or a FIDO2 key wrote a polkit stack that ignored repeated password failures. Pull request 9873 restores the lockout.
The commands omarchy setup security fingerprint and omarchy setup security fido2 created /etc/pam.d/polkit-1 without including system-auth. That dropped pam_faillock from privilege prompts. sudo and login were unaffected.
On a stock Arch system the polkit package keeps its stack under /usr/lib/pam.d, so the setup wrote a new file in /etc/pam.d and that file won. The pull request says 12 failed polkit attempts recorded nothing before the change.
After it, those failures count toward the same tally as sudo, and the stack locks out at 10. The GitHub user Wheel-Smith reported it privately to the security address first. David Heinemeier Hansson merged pull request 9873.