Maybe not the answer your looking for but any Chromebook has a fork of coreboot that I think follows upstream closely.
Chromebooks have been far ahead for awhile in boot security and chromeOS is becoming quite usable with its Linux container support.