Comment 3 for bug 1642863

Debconf executes scripts from /tmp by default but you can try continuing securing the system by changing apt's temp file configuration:
https://serverfault.com/questions/72356/how-useful-is-mounting-tmp-noexec

Anyway this is definitely not a bug in u-u, maybe a wishlist one for debconf.