All thinkpads have a Wifi card whitelist at the BIOS level that prevent installing certain WiFi cards. The restriction can be bypassed with a BIOS modification: either installing Libreboot, Coreboot or editing the official Lenovo/IBM BIOS.
This laptop comes with LoJack, a BIOS capability that the user has the option to "disable", even "permanently" if she wants. Since the BIOS is non-free, and we don't know what it actually does, it is conceivable that the phone-home capability could be re-enabled by a malicious BIOS upgrade/modification or possibly even a program.
From the BIOS: Computrace Module Activation:
Enables or Disables the BIOS interface to activate Computrace modules. Computrace is an optional monitoring service from Absolute Software.
3G cards | 34 |
Acquisition cards | 34 |
Bluetooth | 57 |
Ethernet cards | 172 |
Fingerprint readers | 11 |
Host Controllers | 170 |
Modems | 18 |
Notebooks | 793 |
Printers | 126 |
RAID adapters | 20 |
Scanners | 24 |
SD card readers | 57 |
Sound cards | 142 |
Video cards | 343 |
Webcams | 132 |
Wifi cards | 234 |
TOTAL | 2367 |