This is even something you can make completely passive; check out some of those ODMs in China that make passively cooled M and U series Intel PCs. Generally marketed as industrial PCs and software routers, they do have 18W parts that work fine in 35°C ambient for years and have plenty of performance. It really depends on what you use it for. (Qotom is one of them, there are a lot of white-label manufacturers, but when they make the boards it's pretty close to the 'actual' ODM instead of just another re-badge)
On the other hand, you can't run coreboot on most things, including the Gigabyte Brix Pro.
If you really want to use coreboot, your best bet is to first look up what platforms are supported (i.e. 6th generation Intel) and then look for an ODM that is making a 6th gen system. Next step is to simply ask if they fuse BootGuard or not, and if they do fuse it, how much of it. In many cases you can't run Coreboot in pure form anyway, some blobs will remain to get basic functionality working. If you want a deblobbed boot your options are practically restricted to very old platforms, or 2 or 3 commercial offerings.
But I couldn't find anything like that, either you get flatter, HTPC-like cases designed to stay horizontal, or cube cases (which aren't so nice IMHO, since they take more horizontal surface on the desktop), or you need to find a small mini ITX cases (which can get very small, but they may require SFX power supplies and can be harder to cool down).
A desktop is still a nice thing to have. They can be quiet even when the workload is consistently high.
Unless you really can't spare the space for a full tower its better not to