While this thread is about grub-live issues with Ubuntu. Wouldn’t it be best for Ubuntu users that want to take advantage of the hardening that Kicksecure offers to just install kicksecure-cli-host for the time being?
dependency conflict. you do not morph ubuntu to kicksecure. for example, you can not install kicksecure-network-conf package but you can greatly enhance ubuntu security - grub-live, security-misc, sdwdate, tirdad work and do not cause problems. I saw this topic and asked a friend to try installing packages on his ubuntu and check the system’s operation. he said that there are no failures, everything works fine - browsers, messengers, tor, vpn, dnscript-proxy. secure canonical 
I think devs can write in wiki and github that grub-live and security-misc work in ubuntu. ubuntu users will look for increased security and get acquainted with kicksecure. when they get tired of ubuntu, they will switch to debian-kicksecure
Shouldn’t a good starting point be:
apt install kicksecure-cli-host sdwdate sdwdate-gui tirdad
I thought security-misc can have issues?
Yes internet may not work, wifi interface will be gone