Lenovo is about as good as you getting for a mainstream brand, and they are ultimately owned by the CCP so meh.
In addition to being owned by the CCP, they purposely installed rootkits on consumer hardware for intense data gathering, and it ended up getting compromised.