Right.  Publishing a transaction to the network of one fork will not automatically publish to the network of the other fork.  However, a replay on the other network doesn't need an 'attacker' in the sense of someone intentionally being malicious.  It possible for a misconfigured node to accidentally publish it to the other network.