If they really want to create an evil laptop
They just need to:
- enforce secure boot
- install a hardware DRM module
- solder in the memory and glue in the battery
- make sure it self-destructs after opening
- there must be a firmware backdoor installed
- it has to lose data occasionally, because "corruption is good"