Sparsity and non linearities in data needs to be factored in. Then data aging and maturity. The way anomaly gets detected matters based on these. I have seen consistent Alert floods whereas in reality they were temporal fluctuations or temporal correlation between variables. Measurement and sampling time in timeseries across touch points is another important design decision.