It is the purpose of AppArmor. But in normal land, we just expect documented MySQL options to work.

It really was insane for MySQL package maintainers to make AppArmor the default experience. It ought to have been a separate package, where people that wanted AppArmor could have AppArmor.