It's not wrong, because it really should have that dependency since it's using sbsigntool, but you shouldn't be hitting this bug in the first place: shim-signed should always be installed on UEFI systems, and does pull in sbsigntool.
It's not wrong, because it really should have that dependency since it's using sbsigntool, but you shouldn't be hitting this bug in the first place: shim-signed should always be installed on UEFI systems, and does pull in sbsigntool.