GA4 (direct gtag.js) loads; its collection is refused by connect-src/img-src. Expect csp_blocks_tracker_scripts for GA4 and csp_policy_blocks_tag_requirements for GA4 (connect-src, frame-src, img-src), no script gap.