It's actually 1 insert for the policy, and one insert into policies_tags for each tag.

Postgres' default isolation level of READ_COMMITTED will prevent other threads from seeing the policy until it is fully tagged.