Secure hardware for Qubes

[fsflover]

See also:

Hardware brands which you trust to run Qubes

I would like to ask the Qubes OS community which hardware companies you trust enough to run Qubes OS with sensitive data/actions, and of course why. See also: https://forum.qubes-os.org/t/how-can-we-ever-trust-our-hardware-supply-chain-attack/2846. Relevant earlier posts: @fiftyfourthparallel I did not imply any particular definition of “verify”, I am open to your own definition. Any verification is better than none (though reading the source is of course even better). Since you confirme…

@TommyTran732

• I am also aware that the IME increases the attack surface, but I don’t think entirely crippling it and all of the security features it provides (BootGuard being one of them) like Purism does is the way to go.

Which security features relevant to Qubes does it provide? Can you give any link explaining how BootGuard would help Qubes and why it’s better than Heads?