The end result seems the same: permission denied, link isn't opened, the evince gui just does nothing, the console (if launched from a terminal) saya "env: '/snap/bin/firefox': Permission denied
If Georgia can confirm this is the worst that can happen by not having the Recommends on the updated apparmor profile, then I think it's ok to leave it out, but would be good to have confirmation from @vorlon, as he raised the objection and it's not clear if he saw Georgia's comment.
Looks like we get this if evince is update, apparmor is not, and a link in a pdf is clicked:
Jul 06 18:36:59 j-evince kernel: audit: type=1400 audit(168866861 9.304:78) : apparmor="DENIED" operation="exec" info="profile transition not found" error=-13 profile= "/usr/bin/ evince" name="/ usr/bin/ snap" pid=2246 comm="env" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
The end result seems the same: permission denied, link isn't opened, the evince gui just does nothing, the console (if launched from a terminal) saya "env: '/snap/ bin/firefox' : Permission denied
If Georgia can confirm this is the worst that can happen by not having the Recommends on the updated apparmor profile, then I think it's ok to leave it out, but would be good to have confirmation from @vorlon, as he raised the objection and it's not clear if he saw Georgia's comment.