Good luck getting enterprises to use your non-vetted image repository.

Dockerhub isn't vetted either. Dockerhub is major compliance risk. Too many images of questionable maintenance status and sometimes questionable build. Aside from maybe some base images I wouldn't pull anything from there for enterprise use. (For toying/experimenting around slightly different)

One can't rely on library updates being done, thus one has to have a build chain form many images.

Sounds like that is the enterprise’s problem

They didn't say VCs or grifters are smart, only that it is a play from the playbook that more often than not results in $$$'s for VCs and founders.