> have other companies found better ways to provide this security without impacting developer productivity as much?

only way i've seen is if things get bad, report it to it/support and tell them what folder/files to exclude from inspection so your build temp files and stuff don't clog and slow up everything