If you’re using - say - Debian all over your infra, introducing a whole new OS just for the bastions increases complexity without bringing any significant advantage.
It genuinely seems like the perfect OS for this. Install minimal sets, disable some unnecessary default services, and viola..