No.8828
Old Thinkpads with Libreboot are the only option AFAIK.
I hope we eventually get an OpenPOWER/RISC V machine with verified boot for a GNU/Linux distro with SELinux. That would finally give us a FLOSS machine with all the security of Windows 10 S Mode/new Macs/iOS/Google Pixel (even Qubes is nowhere near as secure as any of these because it has no verified boot).