So distroless has fewer vulnerabilities overall but more critical ones so I wouldn't call it a cut and dry call for distroless.
Distroless also requires provider builds with your specific dependencies so it depends on what those dependencies are.
Nobody stops you from building against Alpine and then removing package manager and the few system dependencies Alpine has.

Love podcasts or audiobooks? Learn on the go with our new app.