Ngl the Thinkpad X13s looks good. It's secured-core, has Pluton, and ARM-based with hardware pointer authentication... But I don't know what to think of Windows 11 on ARM.
I'd like to ditch x86 but except on macOS (which I'd like not to use again) it might be too early.
Just another single-user instance.