Is the ThinkPad T480 still the best choice for Qubes OS, or is there a newer model?

[FranklyFlawless]

Seeking advice: Hardening Project (Coreboot/Heads + Qubes OS)

At the very top of the T480 Board config in Heads repo: # WARNING: This system remains perpetually vulnerable to Spectre v2 (CVE-2017-5715). Mitigations and microcode updates previously applied are now known to be ineffective due to QSB-107 and related CVEs. If Spectre v2 is a concern in your threat model, consider migrating to a platform with ongoing microcode support. Proper OPSEC for Memory Use MUST be followed:https://www.anarsec.guide/posts/qubes/#appendix-opsec-for-memory-use # Configurat…