Best modern ThinkPads?

[Leajones18]

Update:

I’ve read many government workers buy Dell XPS but not sure if this is accurate info. Dell seems to offer to disable HAP-bit in the BIOS:

Dell XPS series now offering "Intel ME disabled"

Official Dell site now mentions the following: Intel® ME Disabled, No Out-of-Band System Management For the XPS series (in my case XPS 13) Dell laptops. This is very good news for those who want the additional security