Opinions vary, photos are hard to take.
The way I look at it, if there are pieces of corrosion that could fall off and pose a hazard of clogging or jamming the 1st stage, the cylinder is due for a shot blast (or tumble). If there is an accumulation of dust or loose corrosion in the bottom of the cylinder then it must be removed and a shot blast or tumble strongly considered. Flash rust that only forms a film with no accumulation of dust in the bottom of the cylinder, even if uneven or streaked, isn't a hazard, though if I'm taking a pile of cylinders in for shot blasting I may add that one to the pile.
I've shown cylinders to experienced PSI inspectors, that concerned me because small crystals were starting to form on the walls, and was told that the cylinder was safe to use but it might not hurt to tumble it next time I get a chance, so that the corrosion would not worsen.
A cylinder would be unsafe for further use only when pitting due to corrosion reaches a certain threshold depth. I'm unsure of the exact rules and when in doubt I have a PSI inspector take a look. I believe it's 1/3 of the wall thickness unless the pitting forms a line or is widespread enough, like a honeycomb, that it would weaken the overall wall. In those cases the remaining material has to be the minimum thickness specified by the manufacturer, which is hard to determine, but usually the cylinders are manufactured close enough to the minimum that these sorts of defects will be cause to condemn a cylinder.