I hope that there will be legal ramifications to discourage this kind of behavior, but ultimately, the vendor that packaged Superfish with the computers is a Chinese company who will probably claim that this kind of thing is permitted by their EULA.
The nationality of Lenovo is relevant insofar as it affects the applicability of US law. IANAL so I can't say how relevant that fact is, but I suspect it complicates litigation..