I have a list of cloud run services in a project and configured as internet enabled. I have default network. No VPC associated with Cloud Run services.

Will the traffic between cloud run services get egress’d to Internet or will it be internal to Google Cloud platform ?

I do understand if the Cloud Run services are mapped as Internal, the traffic is internal to the project.

I was expecting traffic to be internal although marked as internet enabled. Will it be appropriate to associate VPC to bring in traffic restrictions?