All thinkpads have a Wifi card whitelist at the BIOS level that prevent installing certain WiFi cards. The restriction can be bypassed with a BIOS modification: either installing Libreboot, Coreboot or editing the official Lenovo/IBM BIOS.
This laptop comes with LoJack, a BIOS capability that the user has the option to "disable", even "permanently" if she wants. Since the BIOS is non-free, and we don't know what it actually does, it is conceivable that the phone-home capability could be re-enabled by a malicious BIOS upgrade/modification or possibly even a program.
From the BIOS: Computrace Module Activation:
Enables or Disables the BIOS interface to activate Computrace modules. Computrace is an optional monitoring service from Absolute Software.
3G cards | 33 |
Acquisition cards | 34 |
Bluetooth | 56 |
Ethernet cards | 169 |
Fingerprint readers | 11 |
Host Controllers | 170 |
Modems | 18 |
Notebooks | 785 |
Printers | 125 |
RAID adapters | 20 |
Scanners | 24 |
SD card readers | 56 |
Sound cards | 140 |
Video cards | 341 |
Webcams | 132 |
Wifi cards | 228 |
TOTAL | 2342 |