Well that was obviously forseeable and dumb then. Use the user's resources or charge money.
The unexpected thing was that Google colab and GCS are separate such that transfer costs between them often end up as international external egress fees
Unless you set up an alternative you'll get absolutely rinsed through the cost of the instance and then the egress charges on top.