It seems Site Audit doesn't report on JS-based redirects. This can be confusing, especially since GSC does seem to interpret and report them as normal (server-side) redirects.

Ideally, despite showing a 200 status code, there should be some way for Site Audit to report that there is a redirect taking place.