I can find in the journalctl logs: cventin kernel: nvidia: module verification failed: signature and/or required key missing - tainting kernel It seems that this has occurred since the legacy nvidia driver is used (*nvidia-legacy-390xx-*). The same issue has been confirmed in Ubuntu: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1805099 and according to the comments, this is a bug.
[...] It's not though. This is expected if you load an unsigned module on an architecture where Debian signs all the in-tree modules. Ben.