It's well known that the main cyber threats come from two nationstate actors: Russia & China.
They told a bunch of OEMs and they told ARM too. So does that mean they told GCHQ? Not really.
It would be negligent NOT to tell Lenovo when they make a massive chunk of all PCs globally.
Thousands of US corporations run Lenovo computers.