What closes the first-visit HTTP window that an ordinary HSTS response cannot close by it…

What closes the first-visit HTTP window that an ordinary HSTS response cannot close by itself?

1. A successfully registered HSTS preload entry shipped by the browser
2. Adding preload to an HTTP response without submitting the domain
3. Setting X-Content-Type-Options to nosniff