No, egress is indeed public. Here's an example link, straight to R2:
https://img.phantasmagoria.me/img/96XJrjejoHNdrQv7.jpg
Even if you have a private bucket, you can give people a signed link with read access, for up to two weeks, IIRC.
https://img.phantasmagoria.me/img/96XJrjejoHNdrQv7.jpg
Even if you have a private bucket, you can give people a signed link with read access, for up to two weeks, IIRC.
But it'll still cost them money by number of reads