This. I was also worried the first time I noticed, but seeing it happened often I just went on and updated anyway. No issues so far.

I’m assuming the two passwords are the LUKS one and then your login, which you can remove by just configuring your login manager to do auto-login (no attacker will be able to access your data anyway if it’s encrypted, logged in or not).

“An expensive bootloader at that, but hey you already paid us when you bought your laptop thanks to our decades-old grip on the market, so we could not care less what you do next”