Security does not begin when the candidate clicks start. It begins when the paper is written.
Review the items. Freeze the version. Open it only to allocated students, only in the window, with a timer and a logged sitting.
Tab-leave events and a locked submission are part of that sitting. Face verification is a separate institution layer — only claim it when it is on.