> Sometimes, the worker can return a signed URL and have the client directly upload to R2.

That's not what client expect though, and that would be (iaas) provider-dependent.