Worth adding a third option since the thread is a two-way comparison. Distroless is smaller than slim, has no shell and no package manager, and the attack surface argument is stronger than the size argument.
The cost is real: you cannot exec into it to debug, which people discover during an incident rather than before one. Have a debug variant ready or you will be rebuilding under pressure.