We build all our image layers in house from a base nginx or node image. We’re moving to [scratch[(hub.docker.com/_/scratch/) soon to even eliminate going to Docker hub at all.
For home stuff, I don’t super care. I’ll just update as necessary and if something happens and someone gets in, it’s just my stuff.