I was updating a Whonix (KVM) and noticed it trying to update fwupd (libfwupd3 fwupd-amd64-signed fwupd).
I don’t think it’s useful for a Whonix VM since it’s not possible to update firmware from a VM, so maybe it’s better not to bundle them in the VM image?
fwupd can potentially be useful in VMs, for instance if hardware passthrough is being used or if Secure Boot is enabled in the VM and the virtualization software supports UEFI dbx updates by the guest OS. (The UEFI dbx is basically a blacklist that the system uses to identify previously trusted OSes and bootloaders it should refuse to boot because of security issues.)
Doesnt make alot of sense to have this package for anonymous VM only OS. KVM image needs package trimming, it has vbox BS packages as well which is another issue.