Basically what it says in the title.
Is it expected that /var/db/auth.db is recreated when updating to a newer macOS major version?
This effectively removes the installed authorization plug-ins from the login flow, decreasing the intended security. And it's not a good end-user experience either to have to reinstall the plugin after updating - nothing such can be noticed with regular applications.