Ngl the Thinkpad X13s looks good. It's secured-core, has Pluton, and ARM-based with hardware pointer authentication... But I don't know what to think of Windows 11 on ARM.

I'd like to ditch x86 but except on macOS (which I'd like not to use again) it might be too early.