> To work around that, on AWS, you can prefix the image with public.ecr.aws/docker/library/

I believe anyone can pull from the public ecr, not just clients in AWS

Yeah, anyone can, but I think you'll be rate limited if you're not on AWS. So fine for a one off, but not something to put in your CI.