Its better to make these steps reproduced by default with each whonix appvm (better than going for each single one)
but leave the installation of apparmor-profiles-hardened-debian for testers and ppl who want it.
as that Qubes wiki painful even for testing , and i dont see a reason why not whonix by default set security=apparmor.