I made a change that makes incus-compose more like the docker version today. It creates a new managed bridged network named after the stack and puts the instances in that network. This sets the foundation for proxying, and also prevents instance naming collisions when stacks have services with the same name.
For the “expose” directive, I was considering adding an empty ACL to the network which would effectively prevent traffic from outside the instance’s network, then adding ACL rules for each exposed port. Still need to think that through more.