Clock is corrected against Firebase's server clock (not this device's own clock), plus half the measured round-trip time to Firebase, to account for how long that correction takes to arrive. The time.gov ping is a real request to their server, but only measures network latency — U.S. government sites don't let browsers on other domains read their clock directly, so it can't be an actual time source here.