It’s not actually, because the mechanism which allows a vendor to provide “drivers” via UEFI is used by Windows only and nobody else. Windows exclusively is the target of such UEFI abuse.
Lenovo can put as much garbage and bloatware they want in the relevant UEFI firmware-sections, and Linux will simply ignore it, like it always have. No root-kit will be triggered.
As a Linux-user you are actually 100% immune against this abuse. As a ThinkPad-owner doubly so, since this major fuck-up only affected budget/non-Thinkpad product-lines.
I know that's not feasible for their newer lines, which I also own
https://thehackernews.com/2015/09/lenovo-laptop-virus.html?m...
Show me one example - any example - of Lenovo installing any of this kind of stuff on a factory fresh ThinkPad, and then we'll have something to talk about.
Until then, I suggest ignoring biased and axe-grinding sources like "thehackernews".
I do understanding that it's entirely feasible for them to rootkit Linux from the BIOS and install malware onto their Thinkpads but I just haven't seen it happen yet