> The bytes pass through a small Cloudflare Worker on the way, because the free r2.dev URL is rate-limited.

For a 40MB file I suggest hosting it directly on GitHub Pages - that's effectively a free CORS-enabled CDN and supports HTTP range requests, so you should be able to get that demo working without needing to involve Cloudflare Workers at all.