SSL Pinning is a security best practice for mobile application.

All of the above are true

SSL Pinning or HTTP Public Key Pinning (HPKP) helps reduce man-in-the-middle attacks

SSL Pinning does not mean hardcoding the public key into the code.

Works on the client side and adds verification of the server certificate against hashes of public keys, which are pre-bundled with the mobile app