I think NixOS itself could do a much better job here in terms of moving stuff from defaults into profiles.

But yes, it'd also be nice to have something closer to dockerTools.streamLayeredImage.