Mysterious change of folders owner/group to _apt / systemd-journal

Hi, I have been facing an issue for a few days now where something on my home assistant installation is changing the permission for all my home assistant related files. While they are all normally owned by root and belong to group root i suddenly see errors with some add-on another program and i find all permissions changed to owner as “_apt” and group as “systemd-journal”. Given I only see these changes for HA related folder and files , I am suspecting it is something to do with some update or program within HA. Can somebody advise on this.
I have not done an update of hassio recently but have done apt update , apt upgrade of the system. i have also installed a few docker containers outside of HA viz. portainer, node-red & samba.
It might also be related to the debian system i am running, but havent been able to find something yet.
example of ls -ltra

drwxrwxr-x   3 _apt systemd-journal  4096 Feb 23  2020 share
drwxr-xr-x   4 root root             4096 Oct 23  2020 apparmor
drwxr-xr-x   6 root root             4096 Oct 23  2020 addons
-rw-------   1 root root               22 Nov 28  2020 docker.json
-rw-------   1 root root              369 Nov 28  2020 discovery.json
-rw-------   1 root root              278 Nov 28  2020 auth.json
drwxr-xr-x   4 root root             4096 Feb 15 22:18 audio
drwxrwxr-x   4 _apt systemd-journal  4096 May  3 15:52 media
drwxrwxr-x   2 _apt systemd-journal  4096 Jul  7 16:33 ssl
drwxrwxr-x   2 _apt systemd-journal  4096 Jul 13 14:10 backup
drwxr-xr-x   2 root root             4096 Jul 13 14:10 tmp
drwxrwxr-x  21 _apt systemd-journal  4096 Jul 19 13:02 homeassistant
-rw-------   1 root root             6792 Jul 19 21:32 ingress.json
-rw-------   1 root root               99 Jul 19 21:38 dns.json
drwxr-xr-x   2 root root             4096 Jul 19 21:38 dns
-rw-------   1 root root               75 Jul 19 21:38 audio.json
-rw-------   1 root root              207 Jul 19 21:39 cli.json
-rw-------   1 root root              221 Jul 19 21:39 observer.json
-rw-------   1 root root               79 Jul 19 21:39 multicast.json
-rw-------   1 root root              421 Jul 19 21:40 services.json
-rw-------   1 root root              558 Jul 19 21:43 homeassistant.json
-rw-------   1 root root            40630 Jul 19 21:45 addons.json
-rw-------   1 root root              383 Jul 19 21:46 config.json
drwxr-xr-x 293 root root            12288 Jul 19 21:47 ..
-rw-------   1 root root              666 Jul 20 09:46 updater.json
drwxr-xr-x  12 root root             4096 Jul 20 09:46 .

#output of a few commands

$ id _apt
uid=100(_apt) gid=65534(nogroup) groups=65534(nogroup)
~$ getent group | grep systemd-journal
systemd-journal:x:101:

My environment is hassio on debian running with supervisor , Hardware: x86 machine