Look. I'm looking at a Thinkpad. Lenovo owns that line now. I dunno if they can push firmware updates to old, pre-Lenovo models, but they can to current versions.
China aside, Lenovo has lost all semblance of trust after the whole Superfish debacle. Sure it's been more than a decade now but their response to that and the fact that it was even approved internally calls a lot into question. I wouldn't dare go near any of their devices.