They really don't. I suppose having to support windows AND linux rootkits would be too much work. A U430 was my last lenovo after that debacle. It's been mac and system76 since then.
System76 is notable not just for popos but for coreboot. Seems like a pretty worthwhile step at getting away from Mystery Vendor Software that runs before whatever OS you've configured.