Change the default LSM (opted in at installation) to SELinux.
AppArmor is still an option, just not the default. This change only
impacts new installations.
i think the tumbleweed installer is pretty dynamic .It lets you chose every thing including the desktop environment , firewall used and other security settings right from the installer before installing. So i don’t think it matters what is selected by default. But traditionally tumbleweed has been using Apparmour as default choice