Looks like this haven’t been done yet?
One of my friend encountered the grub shim lock issue recently when updating from an older system.
I agree that the install-grub command should be run automatically for a system update like that. So that average users don’t have to deal with live ISO.
(We should read the Known Issues section more carefully though.)