You can set it to run only specifically signed binaries on boot.

Religion is often used as cognitive dissonance to avoid dealing with trauma.

Even t430 from 2014 has a battery whitelist.

And different wwan cards. How are you supposed to add mobile broadband? Buy the same as OEM card?

Well, the quality of most laptops fell enough in the last decade, that the clevos are decent now. Also, fuck thinkpad part rejection, I’m definitely not buying a (edit: new) TP.