How can thinkpads reasonably be trusted after superfish though? Some security agencies don't even allow Lenovo hardware onsite, sort of implies something...
As long as you're willing to put in a tiny bit of effort, you can know that all the software on your machine is coming from known people and companies, that you chose to trust.
Apple is the only company I would trust [at this time] to put only Apple software on retail Apple hardware. But that is because even if anybody was willing to comply with the inevitable list of strict requirements, Apple would almost certainly try to charge the third-parties so much to bundle their software, that no one would reasonably be able to justify the cost.
Microsoft, I could see making a deal with some third-party to put into certain models of the Surface. It might just be something like hardware drivers with a Windows GUI to change some settings, but they would do it.
They seem to act like they're separate. Hardware build and installed software is entirely different. I was under the impression they still operated as separate divisions. UK Support was even on separate numbers until fairly recently - now it separates at top level.
If Lenovo get a strike, Sony probably should for the rootkit.
If you're not comfortable ignore my "probably wrong" suggestions! :)
First thing I do with any Win machine is remove the crap and demos or clean install and add drivers. Or occasionally start immediately with !Windows.