Y'know, Discord, frequent app updates are one thing, forcing me to install new debs, but did you consider that debian oldstable only has apparmour up to 3.x when you put a requirement for 4.0 into your new apparmour profile? Perhaps that apparmour only runs if it can run every profile correctly?