Are ARC's runners safe with public repositories?

[audunsolemdal]

According to this link https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners#self-hosted-runner-security

We recommend that you only use self-hosted runners with private repositories. This is because forks of your public repository can potentially run dangerous code on your self-hosted runner machine by creating a pull request that executes the code in a workflow.

This is not an issue with GitHub-hosted runners because each GitHub-hosted runner is always a clean isolated virtual machine, and it is destroyed at the end of the job execution.

Say I am running an ephemeral RunnerDeployment, and my workflows run in a dedicated kubernetes cluster (AKS). Do these security concerns still apply?