> I think they put an overlay on the page and intercept the first mouse event they can,
...such as one of those "totally-GDPR-compliant" accept-cookies-please modals maybe? :) I am 100% certain this is how a large number of sites bypass autoplay restrictions.