[als0]

> fit their custom hardware, eg. a TPM designed for user security instead of vendor lock-in.

Just here to point out that they use a standard commercial off-the-shelf TPM manufactured by Infineon. It's not custom hardware. As with all TPMs, it is the firmware/OS that decides whether to use it for lock-in purposes or freedom.

[boogies]

I think the firmware is custom (and of course it’s the nexus of hardware and software, so exactly the part that OEMs can best provide the user unique value through. System76 and Pine64 (and I think Purism) provide open source firmware you can reflash yourself for custom keyboard layouts, firmware killswitches, etc., though System76’s hardware itself seems very off-the-self (Clevo white-label). (Edit: And I think Purism Librems overall design with hardware killswitches, etc. are custom ofc.)