Not much has changed then. If you don't meet the strict criteria of the Open Source Program, for example you are a for profit company publishing an open source

Not much has changed then. If you don't meet the strict criteria of the Open Source Program, for example you are a for profit company publishing an open source image, you can't upload new versions of your public images. Your images are one CVE away from becoming useless. If you do meet the criteria, they will build images for you. No way to have your own build process. All artifacts are made public.