You do not need to expose your local service to the internet for local fulfilment, see https://developers.home.google.com/local-home/overview

This does also support using Google Home app to trigger actions on an internal system or service.

The purpose of the public components are Google infrastructure such as Auth for account linking and device discovery. The action once installed on your assistant device executes within your network.