The fact that the Mac starts getting hot and the battery begins draining rapidly at roughly the same time every afternoon—around 3:30 PM, is an important clue, especially since this started after installing macOS 27.
Safari showing significant CPU usage is worth noting, but that alone doesn't tell us what is causing the battery drain.
When the problem starts, I would first look at System Settings >> Battery >>Last 24 Hours.
The graph records the battery level in 15-minute intervals, so it should help confirm exactly when the drain begins and how quickly the battery level is falling. (Apple: Change Battery settings on Mac)
At the same time, open Activity Monitor >> View All Processes >> Energy.
Look at Energy Impact, 12 hr Power, and Preventing Sleep, and note which processes are using the most energy.
In particular, see whether Safari remains near the top or whether another process becomes active when the problem starts. (Apple: View energy consumption in Activity Monitor)
Because this is a 2022 MacBook Air, I would also check the battery's Condition, Maximum Capacity, and cycle count.
The first two are under System Settings >> Battery >> Battery Health, while the cycle count is under System Information >> Power. Apple rates the M2 MacBook Air battery for up to 1,000 cycles. (Apple: Determine battery cycle count for Mac laptops)
It's also worth checking System Settings >> General >> Storage and recording the total drive capacity and how much free space remains.
That does not establish a connection to the battery problem, but it is useful information when assessing the Mac's overall condition.
I' would also look at System Settings >> General >> Login Items & Extensions, particularly Allow in the Background.
Pay attention to third-party software such as commercial VPNs, security software, backup or synchronization applications, and system utilities.
Since the problem appeared after installing macOS 27, check with the developers that these applications and any associated system extensions are compatible with the installed macOS version. (Apple: Open Login Items settings)
The fact that it happens at about 3:30 PM every day is worth investigating separately.
Look for anything that routinely happens around that time, such as a backup, synchronization activity, scheduled software task, or other automated process.
The goal is not to assume that one of these is responsible, but to see whether something changes at the same time the battery drain begins. Not
When the problem occurs, also note whether the Mac is running on battery or connected to power, what applications are being used, and where the Mac is sitting.
Apple recommends using a Mac laptop on a stable surface that provides adequate ventilation. (Apple: Keep your Mac laptop within acceptable operating temperatures)
Two useful comparison tests are Safe Mode and a temporary second user account.
Start the Mac in Safe Mode and see whether the same heat and battery drain occur around 3:30 PM. Safe Mode can help determine whether software that loads during startup is involved.
Then create a temporary second user account and test the Mac during the same period. If the behaviour changes in the second account, that would make the existing user environment worth investigating.
If the problem continues, run Apple Diagnostics to check for possible hardware issues.
If you can reproduce the problem while using Activity Monitor, you can also generate an Activity Monitor System Diagnostics report, which may be useful if Apple Support needs to investigate the problem. (Apple: Activity Monitor User Guide)
Finally, EtreCheck can be used strictly as an additional diagnostic tool.
Its report can provide useful information about installed software, background processes, and system configuration, but it should be treated as information to investigate rather than a diagnosis.
Taken together, these checks should tell us much more about what is happening: exactly when the drain starts, what is consuming the energy, the condition of the battery, available storage, what third-party software is running, whether the behavior changes in Safe Mode or another account, and whether there is any indication of a hardware problem.