Correct. Container Registry makes it easy for you as a developer to store, share, and manage container images.

Reference: https://docs.oracle.com/en-
us/iaas/Content/Compute/Concepts/computeoverview.htm#ariaid-title1

This topic describes how to set up and manage a Network Address Translation (NAT) gateway. A NAT gateway gives cloud resources without public IP addresses access to the internet without exposing those resources to incoming internet connections. You can add a NAT gateway to your VCN to give instances in a private subnet access to the internet. Instances in a private subnet don't have public IP addresses.
With the NAT gateway, they can initiate connections to the internet and receive responses, but not receive inbound connections initiated from the internet. NAT gateways are highly available and support TCP, UDP, and ICMP ping traffic. Reference: https://docs.cloud.oracle.com/en- us/iaas/Content/Network/Tasks/NATgateway.htm?Highlight=NAT%20gateway

Explanation
Oracle's mission is to build cloud infrastructure and platform services for your business to haveeffective and manageable security to run your mission-critical workloads and store your data with confidence.
Oracle Cloud Infrastructure offers best-in-class security technology and operational processes to secure its enterprise cloud services. However,for you to securely run your workloads in Oracle Cloud Infrastructure, you must be aware of your security and compliance responsibilities. By design, Oracle provides security of cloud infrastructure and operations (cloud operator access controls, infrastructure security patching, and so on), and you are responsible for securely configuring your cloud resources. Security in the cloud is a shared responsibility between you and Oracle.
In a shared, multi-tenant compute environment, Oracle is responsible for the security of the underlying cloud infrastructure (such as data-center facilities, and hardware and software systems) and you are responsible for securing your workloads and configuring your services (such as compute, network, storage, and database) securely.
In a fully isolated, single-tenant, bare metal server with no Oracle software on it, your responsibility increases as you bring the entire software stack (operating systems and above) on which you deploy your applications.
In this environment, you areresponsible for securing your workloads, and configuring your services (compute, network, storage, database) securely, and ensuring that the software components that you run on the bare metal servers are configured, deployed, and managed securely.
More specifically, your and Oracle's responsibilities can be divided into the following areas: