Cert Pinning is more akin to "trust on zeroth use, only this certificate", HSTS is kind of unrelated since all it does it tell the browser to access the site vi

Cert Pinning is more akin to "trust on zeroth use, only this certificate", HSTS is kind of unrelated since all it does it tell the browser to access the site via HTTPS. If the site is on the preload list all that buys you is the first access must be over TLS. Pinning is more for the app case, HSTS more for the browser case.