> apt works with sudo (this is a locked-down device where I don't have root permission on, why does it need a fake sudo to use apt?)

It's a VM running normal Debian. Inside the VM, you do have root, and that sudo isn't fake.