This is a major issue for Kicksecure hosts (currently cannot use dracut):
Debian bug report:
unbootable system after installing dracut on a standard Debian installation
Not an issue for Kicksecure VMs or Whonix VMs because there dracut works for some reason.