Besides, as another commentator pointed out, if you're going to be worried about a country spying on you, it should at least be your own country.
Instead of that, why don't you say Google must be bugged by the Americans. How could it not be? In fact, the main reason why the Chinese government banned Google is that all the data e.g. Gmails would be stored in a US server, which can be inspected by the American government any time if they want. It would be a nightmare for Chinese national security. Some other governments e.g. South Korea are realizing the same danger and are following suit by requiring their government/military officials to not use American services.
Compared with that, I'd say using Linux and having full control over the software is as private as you can get.
If you’re installing Linux, that wipes out software bugs (seems the most likely place to me). Lenovo provide details about the components and design, which means you could verify/replace things if you like. ThinkPads are trusted enough by the USG for various uses (though they seem to prefer Dell).
Personally I’m more freaked out by Intel’s Management Engine.
Linux would address OS bugs, and it brings bugs of its own. All your applications also could be exploited.
> Intel’s Management Engine
That and other pre-boot subsystems are exploitable by adversaries.
That said, if you're not Chinese/in China, the Chinese govt has little/no power over you, and probably isn't sharing what they collect on you with your govt, which does.