It is based on a global population of browser usage, which is effectively a (dynamic) hardcoded list, that is also specifically filtered for a certain level of popularity and above.
Your interactions influence the default list, minutely, but also only if it’s a popular site. The distortions remain.
Apologies if we have different definitions of hardcoding. I’m not suggesting this list is a compiler argument. Just saying that a Google list decides whether a domain can autopsy video, instead of a more open web approach like “HTTPS can do this”, which is used for many features like WebRTC.