Reading the container from Google…
Published containers carry the consent requirements each tag declares under Advanced Settings and, for custom templates, the consent types their permission manifest names. Tags that fire without a requirement are not necessarily wrong: consent can be enforced by a CMP before GTM loads, or by trigger conditions. Treat this tab as a checklist, not a verdict.
ad_personalizationad_storagead_user_dataanalytics_storage4 tags with additional consent checks52 custom script tagsad_storagead_personalizationad_user_dataad_storagead_personalizationad_user_dataad_storagead_user_dataad_personalizationad_storagead_user_dataad_personalizationCustom HTML, pixels and vendor templates that run whenever their trigger fires.