These online petitions tend to be largely filled in by people from North of the border. There is no way of verifying that the signatories are Hong Kong people (the only validation is the last four digits of HKID which can be any four digit number)
Unless that site requires valid ID to sign in support, I immediately disbelieve the number because bot activity is basically inevitable. (Not that I don't believe that there are people in Hong Kong who support the bill, just that online signatures don't help figure out how many there are.)
https://www.safeguardhongkong.hk/