since latest release of whonix, apparmor profiles seems to be installed by default which is good. what is not good however, is that they are not enforced by default. this might cause confusion and provide fake sense of security to newbies who think their apps are apparmored
Which profile(s) specifically?
Quote Whonix homepage https://www.whonix.org/
Risk Minimization
AppArmor profiles restrict the capabilities of commonly used, high-risk applications. →
And after clicking the ->…
AppArmor profiles restrict the capabilities of commonly used, high-risk applications such as Tor Browser.
That link leads to AppArmor which has all the details.