Unattended-Upgrade::Allowed-Origins
{${distro_id}:${distro_codename}-security;};
Comment that line and see if the next security update will ask for
authentication.
The package unattended-upgrades, in Trisquel's default system, may be the
reason why security updates need no authentication. It can be reconfigured
through the Synaptic package manager or with the command 'sudo
dpkg-reconfigure unattended-upgrades'. Editing
It depends on how APT is configured. Look at Software sources (in the
System settings). The drop-down menu associated with When there are
security updates can specify that such updates are automatically downloaded
and installed, which translates to no need for a password (I believe).
A
In Software Updates, the most logical place of these in which to look
(...)
This is the one. I was translating from French. But your When is not set to
what I had imagined could be the reason.