1. The malware was a rootkit for Windows
2. Windows has an interesting "feature" that will blindly auto-install software that is embedded in a certain location in the BIOS. If a rootkit is placed there, Windows will always try and install it.
It's bad for Lenovo, but it's also bad that Windows has this anti-feature.
The writers of the malicious software lenovo has so far been caught including in their products were specifically targeting windows users, but I see no reason to think that they wouldn't include malicious software that targets linux if some seedy company decided it was worth the effort to write it and offered lenovo enough cash. Their total lack of integrity and respect for their customers is enough that I could never feel fully confident that I was safe just because I was running a non-windows OS.
and/or for malware that can disable WFP.
https://michlstechblog.info/blog/windows-identify-a-wpbt-bin...
https://arstechnica.com/security/2023/06/millions-of-pc-moth...
With my motherboard you can deny the install at least.