Running Tor Launcher with the same AppArmor profile as Tor Browser would force
us to open that profile too broadly. E.g. it requires the ability to run
dbus-daemon, to give an idea.

Given:

 * Tor Launcher runs as a dedicated user
 * Tor Launcher runs very early, at a time when the user likely isn't doing
   anything sensitive to X keystrokes sniffing etc., and closes immediately
   after Tor is ready
 * Tor Launcher offers a very limited set of functionality

=> it seems safe enough to run it unconfined, at least for now.