My workplace mainly uses HP equipment. The HP Probook line seems pretty solid from whats I've seen so far.

Also they are the only manufacturer so far IIRC which include a 'Pre-boot DMA Protection' option in the BIOS which helps mitigate the Thunderbolt 3 DMA attack