There are two options in conjunction with a cookie banner:
Our script is not loaded at all without consent (the easiest to implment for one when you want to be 1000% safe as a marketer, but then INP, CLS and LCP can be missed when one closes the screen immediately after the cookie notice)
Load our script directly (then very little is missed and all metrics are measured directly), but people have to let us know via a callback that there was consent, and then we start tracking additional things as well (like browser version, device memory, pixel ratio).
Then the metrics come in directly, and this data is only combined with the datasets once there is consent, but there is also nothing to worry about when that data is not there (then you simply have less filtering capabilities in those dimensions).
Device memory, pixel ratio and browser will be tracked because they are privacy compliant, but there may be privacy officers who disagree, and so we've built in at the freedom to let people regulate that themselves.