Page 6's policy without https://www.googletagmanager.com in script-src-elem. gtag.js is refused (an enforced block, attributed to GA4), GA4 is still found from its inline config. Expect csp_blocks_tracker_scripts for GA4 and csp_policy_blocks_tag_requirements for GA4 naming script-src-elem as documented: judged blocked, not unknown, since there is no nonce or 'strict-dynamic'.