The snapd daemon tracks which apparmor features are available when it starts and updates security profiles each time there is a change.
Make sure to have apparmor userspace tooling (apparmor_parser) present when you boot a kernel with apparmor enabled (i.e. apparmor=1 security=apparmor) and /sys/kernel/security/apparmor is mounted. Otherwise snapd assumes that apparmor is functional and tries to load/unload profiles when installing/removing snaps.