Actually, doing some further debugging, my assumptions were maybe not correct?
In Network Isolation by Project on Single Server Incus Host we see that instances on different project and on different bridges do have connectivity between each other?
I am not quite sure what restricted.networks.access: incusbr-foo is actually doing?