I’m trying to implement both basic and advanced Google Consent mode for my companies internal cookie management solution but I’m getting a bit confused on the differences of basis and advanced mode in relation to implementing the code.

Basic:
As I understand Google Tags should be blocked until consent is granted. Is that as simple as setting consent types i.e. analytics_storage, ad_storage etc. to denied as default and then updating them to granted on consent?

Advanced:
As I understand Google Tags will not be blocked before consent, instead data will be collected and then upon consent sent to Analytics and/or Ads.

Consent types default does not necessarily have to be denied, and user should have a code less way of setting their defaults (even without using GTM template), with the possibility of adding region specific behavior.

Am I missing something? Like is there more to ensuring Google Tags are being blocked/not blocked? I have seen somewhere that the gtag('config') for basic consent mode is executed only on consent update. Is that best practice?