Does EXPOSE actually publish a port?

No. EXPOSE is documentation/metadata recorded in the image — useful for tools and humans reading the Dockerfile, and used by docker run -P (publish all exposed ports to random host ports). Actually making a port reachable from outside the container requires -p hostPort:containerPort at docker run or a ports: entry in Docker Compose.