> some additional variant of Debian which just ensured that everything apart from security fixes was held back until fixed-interval point releases.

a.k.a. stable-proposed-updates

Debian Stable point-releases are not truly 'fixed interval' of course, but close enough.