There seems to be a whole lot of half-informed “information” floating around about Lenovo and/or MS locking out Linux on new ThinkPads. And as usual, the torch and pitchfork crowd railing against the conspiracy.
Nope. You can still boot a signed distro, but it takes one more step. The ability to boot something that uses MS 3rd party certs has been split out in the secure boot options. Enter BIOS, switch that toggle, and Bob’s your uncle. Confirmed on my ThinkPad X1 Yoga Gen 7 and multiple other ThinkPads by my mates. Whew.