One annoyance (I don't know if they've since fixed it) was that Docker Hub would count pulls that don't contain an update towards the rate limit. That ultimately prompted me to switch to alternate repositories.

one way is to host a manifest file (can host one on r2) and update it on each deploy and when manifest changes, new container image is pulled.