Did you guys from balena noticed the google project distroless?
The main goal is to eliminate the OS in the containers to the bare minimum the application needs to run. This greatly sizes down image size and reduces attach surface.
Problem is the lack of base image for other than x86 devices.
Do you have anything regarding distroless in your pipeline?