HEADLINE: enable AppArmor by default
DESCRIPTION: AppArmor improves security by limiting the capabilities of programs. Ubuntu has done this years ago [1]. I'd like to see profiles for web browsers enabled by default.
I think AppArmor is the right choice of default Mandatory Access Control for Debian because Ubuntu and security focused Debian derivatives like Tails [2] and SubgraphOS [3] have already committed to it.
[1]: https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/AppArmorP...
[2]: https://tails.boum.org/contribute/design/application_isolati...