EPEL 10.0 does not have mod_security, but EPEL 10.1 does.
One could wait until AlmaLinux 10.1 is released (later this year),
or submit a request to EPEL to build the package also for the 10.0 targets.
Looks like it’s better to still stick with AlmaLinux 9 in critical production and wait for repos to stabilize…
As rule one should use only packages built for el10 in el10.
However, some third parties (e.g. Microsoft, Zoom) offer packages built for older distro with claim that they “work” for N+. It really depends on what features (versions, libraries, packages) the application/package requires.