5️⃣ Lightning arrestor in the wrong place

The arrestor belongs inside the shelter or roof access point, right where the coax enters the building, not outside and definitely not beside the BDA in the comms room.
If lightning hits, you want the surge stopped at the entry point, not 80 ft downstream.