The official Whonix tutorial for KVM instructs to install and enable AppArmor:
I have used Whonix with KVM with and without AppArmor and I don’t see any differences.
Maybe the documentation exists somewhere and I overlooked it, but I don’t see what is the purpose of AppArmor in this context? What are the risks of using KVM without AppArmor?