An LTS Ubuntu release should be fine, though I'd hold off on using it in production until a year or so after release (to give Canonical time to shake out bugs).
A non-LTS Ubuntu release should be avoided, since they tend to be less stable.
If you're using something in the Debian family, Debian itself is probably the much better choice unless you're looking to use Canonical's enterprise products.
I think it can be used in production but it's more work. Red hat and CentOS can be hardened following STIG security profile on first boot from fresh install which includes SElinux checks, firewall and service configurations, etc. I'm sure there's more to it, but reading documentation on these alone is enough to overwhelm me.
A non-LTS Ubuntu release should be avoided, since they tend to be less stable.
If you're using something in the Debian family, Debian itself is probably the much better choice unless you're looking to use Canonical's enterprise products.