Purism sells a combination of the Librem Key and Librem laptops. They will configure everything and ship it. You then have the option to change the keys on the smart card to guarantee that even they cannot get into it. The theory is that we trust Purism to not install spyware on our hardware and we run only software which we also trust using encryption and signatures based on the Librem Key to prevent tampering.
I paid a premium to get the Librem hardware from Purism. This premium affords me hardware switches for mic+camera and wireless (bluetooth + wifi). I can turn them off and know that they are really off. Software cannot turn them back on. In addition, the system removes most of the black box vendor code for booting up. The firmware (BIOS) has been replaced with a specialized Linux to minimize risk from 3rd party actors and backdoors.
The hard drive is huge so I've got multiple partitions. At first I didn't have anything encrypted but now that I have the smart card setup working I am migrating all systems to using LUKS+librem key. I have installed the heads beta bios replacement. I now have pureboot working. The system validates the boot files and then uses the librem key to unlock the root partition.
I'm tired of fighting with PureOS so I'm wiping it and replacing with Kubuntu. I can get even more smartcard features working with Kubuntu plus all of the other stuff that PureOS would not do. I will try PureOS again when they release another version but given its limitations I suspect that it will never be my primary working system. An informal poll I posted to the Purism forums suggested only half of the people there use PureOS long term.
Would I buy another Purism product? Probably not. I don't think the premium I paid was worth the value I get. I can get most of the other security features at half the price with other vendors. Do I trust Asus or Lenovo as much as Purism? No, but is that trust worth paying twice the price? Maybe after a run-in with the government I might feel differently but there are mutliple ways to compromise a system and using Librem hardware does not prevent all of them so it's only a little more secure for a lot more money.
My other big gripe with Purism is that they are a small company and don't seem to have the manpower to support their ambitions. They are promoting and working on the librem 5 phone while the documentation and development for the laptops have stalled. I have repeatedly posted in forums and emailed them about outdated documentation--all having been ignored. Consequently, I'm building out my own docs and working with upstream projects such as heads. (That is another story as Purism is one of the key players in that project also.)
This was my backup system purchased while the librem 15 was being repaired for a few months. Unfortunately, it didn't have enough ram at 4G to support all I was throwing at it. I paid another $70 for an upgrade to 16G and now it works really well. In fact, Since the librem has been trashed for a while I've just been using the Motile. Considering I only paid $300+$70 for it I'm quite impressed. It has a slower processor than the Librem but better video output.
I'm dual booting with Windows 10 since it came on it though I rarely boot Windows. I haven't had Windows in my house since I wiped out Win95 circa 2000.
The hard drive not very big. I have installed Kubuntu and CentOS 8 on this system. It is EFI based so booting works differently than the Librem. Though I turned on the secure boot features I can't tell if they are working. Windows still boots so yes....? I am using the librem key with this system also. Linux is using encrypted partitions.