These laptops require a dedicated programmer, and they're the most up-to-date laptop models that come without remote manufacturer backdoor ("Management Engine").

I won't have the time to set this up myself soon, so I went ahead and bought one. It's my rainy day laptop.