They were still pre-installing malware in people's systems in 2016. They were caught with a hardcoded password in their fingerprint scanner after that. In 2019 they still couldn't be trusted not to backdoor their devices, they released a alarm clock with a hard-coded SSH password. They are not a company any should be trusting with anything.

There's a world of difference between "we can't be sure that other companies won't backdoor our systems" and "We know for a fact that lenovo has done it multiple times and repeatedly lied to customers about it when found out and even once released a patch which they claimed fixed the problem but which actually still left their customers vulnerable."

All people are capable of being untrustworthy, but that doesn't make all people the same as those who have already demonstrated that they are.

"I don't think secure hardware is a real thing in the PC world right now."

It hasn't been in a looooooong time.

The first three layers of the OSI model are sorely neglected.