I personally think its true simply because Intel has no incentive to spend money on them being secure. (they are usually bundled with T and other enterprise laptops which live behind a firewall).
I would highly recommend getting a bios from reddit.com/r/thinkpad. I don't think you need to reinstall windows if you bought new but if not then reinstall windows.