This may (or may not) bear on your question.

https://stackoverflow.com/questions/8859666/how-does-the-arcs-zeroing-weak-pointer-behavior-implemented#8859790

Effectively, a weak reference allows the object to go out of scope. When that happens, every weak reference to that object is zapped.

So weak references are not counted, but they are tracked.