> The existence of mechanisms that bypass authentication or authorization are unacceptable to Lenovo and do not follow Lenovo product security or industry practices
What about their own installation of spyware like Superfish[1] or even harder to remove UEFI malware[2]? Apparently they are OK with doing it, when they do it themselves.
1. https://en.wikipedia.org/wiki/Superfish#Lenovo_security_inci...