Up until the Thinkpad X230, there was coreboot support which was great. However, with the new Intel chips now enforcing 'Boot Guard' this is no longer an option [1], is it?

I wouldn't be surprised if Lenovo decided at some point to also distribute malware modules for Ubuntu as well.

[1] https://www.phoronix.com/scan.php?page=news_item&px=Intel-Bo...