Note that ubuntu accidentally shipped the apparmor profiles in enforce mode for 5.4.5 on 17.10 as part of a stable release update, and we have been getting rather negative feedback as this broke numerous real use cases. See https://launchpad.net/bugs/1751005.