Sorry,
I thought I replied to this already.
I remember that issue with Lenovo. I believe it was around 2014. I was a computer sells rep at the time. A Lenovo rep was put in the hot seat when that was announced. The spyware on Lenovo's was coming on the refurbished Lenovo's. Lenovo contracted another company to refurbish their laptops and those are the ones that were banned. A lot of it was the same spyware we all have on our computers and programs today. That's why we always see advertisements or something searched for online. Heck, you can't even have a conversation around your cell phone without getting advertisements on things you were talking about. For example, my wife and I were talking about diapers and how much they cost. A little later, I was reading about something on my phone and an advertisement for diapers popped up.
So, we are extremely careful with the systems we use. In fact, we are not allowed to view TikTok videos on any of our issued devices. Not even our company cellphones. Id we use our personal phone for work, we are not allowed to view it on that either. We are also not allowed to have certain online clouds to store out info on. By the way, Apple collects all the data from our devices, so it's just a matter of time before things go wrong with that.
The point is, if you have a device that is hooked to the web, you're being spied on. There's no way around it. DOD systems are not even hooked to the Worldwide Web. Only the Intranet, unless you have special permission, equipment, and programs.