Region-scoped defaults before Google config
BlackShield initializes Google consent mode before the Google tag config command runs, so analytics and advertising-related storage start denied for EEA, UK, and Switzerland traffic while other regions keep the non-banner default.