Every few months someone asks why GA4 shows 1,200 organic sessions while Search Console shows 1,800 clicks, and the thread turns into a fight over which tool is lying. Neither is. They just count different things. GSC counts clicks from Google results, including some that bounce before the page loads or hit a redirect. GA4 needs the tag to fire and consent to be granted, and it assigns sources per session, so someone who searched on Monday and came back directly on Wednesday shows up as direct.
Honestly, I'd stop chasing an exact match. The gap depends heavily on your consent rate, so use GSC for query and page demand and GA4 for what those visits do. Track the ratio between the two over time instead of the absolute numbers. If the ratio suddenly moves, something broke, and that's what's worth investigating.