I prefer to use apt full-upgrade over pkcon, mainly because needrestart doesn't work with pkcon. Playing around today, however, I noticed that pkcon offers to install 1 package and upgrade 15, whereas apt says 15 updated packages are held back and doesn't even have one flagged for installation.

Everything I've read on this forum and elsewhere says that you have to be careful of apt upgrade in KDE Neon, but that apt full-upgrade does the same thing as pkcon update. If that's the case, why is pkcon giving the option to install a package apt isn't even seeing, and upgrade the 15 apt is trying to hold back?