Can you check this Chris - I am getting often this high numbers and also enigmail fails with it so I need to switch to console usage for gpg keys which isn't user-friendly (thus not working with PureOS policy of being easy of use).
zlatan@librem:~$ apt policy thunderbird
thunderbird:
Installed: 1:52.4.0-1 Candidate: 1:52.4.0-1
I assume apparmor isn't affecting it (or that it didn't get reverted the disabled profile in Debian) but I didn't check Debian tracker.