Question about exposing resources that are created inside a ComponentResource. I know about register_outputs, but is there a dramatic difference between refering to, for example, a registered output “network.vpc_id” where network is the ComponentResource, versus network.vpc.id where vpc is an object attribute that is an ec2.Vpc?

No, those two things are fundamentally equivalent.