There could be a team that goes through / gets knocked out based on yellow and red cards.
Also, hilariously, the ultimate tie-breaker is FIFA ranking, which seems mental. Toss a coin would be fairer.
How the eight best‑ranked teams finishing third are decided
The eight best teams among those ranked third will be determined as follows:
greatest number of points obtained in all group matches
goal difference resulting from all group matches
greatest number of goals scored in all group matches
highest team conduct score (players and team officials) relating to the number of yellow and red cards obtained in all group matches
the two or more teams still equal on points shall be ranked according to the most recent published edition of the FIFA/Coca‑Cola Men’s World Ranking