Discord should place a wrapper around the changes. E.g. before allowing you to change email, phone number or anything on file, it should ask for the proper authentication. If Discord did not implement proper security, that’s again not Kaspersky’s fault or responsibility. Kaspersky is not the police of the internet, it is merely an antivirus provider.
Kaspersky has a much better detection that Malwarebytes and I am not even talking about the preventive capabilities.