Maybe,

Alder Lake-P/H Laptops (12th Gen Intel Core) like the Core i9-12900HK (14 cores: 6 performance + 8 efficiency). They support DDR5, PCIe 4.0/5.0, Thunderbolt 4, and advanced features like Wi-Fi 6E

It's the Macbook 1,1 and the Macbook 2,1 that will support Libreboot.

I’ve got some old Macs around I forgot to sell. I didn’t realize Libreboot ran on Macs. I’ll have to give it a try.

I have 200t only, and haven't stayed on it. Mine has no internal mechanism and requires either removal or sketchy soldering to barely there pins. I was going to make an acupuncture needle based 3d printed jig, but never got around to designing and printing it.

My point is, worst case scenario, can't you just pull and program it from scratch with flashrom? Then you have the ability to check the hex dump directly and know what is present.

It has been awhile since I shopped for hardware stuff, but I seem to recall seeing some very small and low profile sockets for modern flash chips that looked like they would fit almost anywhere. That would be my goto if I really needed the security.

https://libreboot.org/docs/install/#which-systems-are-supported-by-libreboot

Probably a modern thinkpad like the t480