I don’t use windows. There could be one for Linux but I can’t spent my life worrying about what could be. Gotta get work done eventually and I’ve got encrypted boot and data volume with secureboot.

If you have a larger tinfoil hat you can always libreboot an x220.