The same thing happened to me earlier this year with a self-hosted instance of Umami Analytics.

https://news.ycombinator.com/item?id=42779544#42783321

Unironically, including a threat of legal action in my appeal on the Google Search Console was what stopped our instance getting flagged in the end.