> Unless you're paranoid about an OEM backdoor

Lenovo does have a history with installing a very obvious spyware rootkit on their consumer PCs[0].

[0]https://support.lenovo.com/us/en/product_security/ps500035-s...