seem it is triggered for root upon restart (@reboot)
for me it seems obviously that /etc/cron.d is checked by root and the pihole file is processed doing update check activities.
I dont know where the 30s delay you mentioned is coded for pihole, if so, then the @reboot line in /etc/cron.d/pihole is not needed or should also be delayed to give NW a startup