Right now there's a thing that can easily trip up a user. We take the container healthcheck and turn that into two different healthchecks: the target group health check which sends an http request to a path on the task, and an ECS healthcheck which executes the command (as I understand it).
So a user who has, for example, forgotten to install curl in their container, they might see 200 status codes show up from the LB healthchecks and think everything is fine, and be confused about why their services fails to deploy.