I was updating a Whonix (KVM) and noticed it trying to update fwupd (libfwupd3 fwupd-amd64-signed fwupd).
I don’t think it’s useful for a Whonix VM since it’s not possible to update firmware from a VM, so maybe it’s better not to bundle them in the VM image?