Thanks a bunch for jumping in here @MarkDoerr!
I’ll need to reach out to the team that handles these scripts and mention nonce handling as well, thanks for pointing these out!
Odd, with either https://www.googletagmanager.com or https://*.googletagmanager.com allowlisted there aren’t any CSP related errors for the GTM script in particular in Brave nor Safari, just Chrome and Firefox.