ya, this doesn't install anything in the cluster, you run the command on your cluster, sanitize the private image info out of it, then paste in the public image names & SHAs
Still no.
No-one is forcing you to. I hope you have implemented a similar mechanism to check your images.