FYI this is the fix for chrome (attached patch), but maybe I should report to a separate bug as it covers more than TB...
I haven't looked at the gpg issue and apparmor configuration but it may too be best fixed at a global level... Unless we only want to allow specific applications to run gpg? The fix is inspired from https://askubuntu.com/q/1357638/628778 -- Thomas
--- a/etc/apparmor.d/abstractions/ubuntu-helpers 2021-04-03 02:09:19.000000000 -0400 +++ b/etc/apparmor.d/abstractions/ubuntu-helpers 2021-11-24 00:55:23.649143462 -0500 @@ -70,6 +70,7 @@ /opt/google/chrome{,-beta,-unstable}/chrome-sandbox PUxr, /opt/google/chrome{,-beta,-unstable}/google-chrome Pixr, /opt/google/chrome{,-beta,-unstable}/chrome Pixr, + /opt/google/chrome{,-beta,-unstable}/{,chrome_}crashpad_handler Pixr, /opt/google/chrome{,-beta,-unstable}/{,**/}lib*.so{,.*} m, # Full access