I was once investigating "partner reporting that our embed loads slowly". The investigation result was something like: their HTML injects JS, which injects another JS, which injects GTM, which injects an SDK, which injects the embed.

Of course it all loads only when the user does not have any adblocking or tracking protections enabled.