These ThinkPads come with Libreboot preinstalled, replacing the BIOS with Free Software. Libreboot offers advanced security features such as LUKS2 support in flash (GRUB payload) and faster boot speeds.
Your choice of Debian Linux, other distro or a BSD with full driver support. I run the Libreboot project; sales to fund my work.