Hello fellows

I was wondering which side would be better:

Having some old Thinkpad but with coreboot/linux installed and the ME therefore disabled, but having security flaws with ancient cpus and no microcode updates?

or

Having some new high end device, with proprietary uefi and just linux?

I‘m bothered about those 2 options… Privacy and Security are going hand in hand for me and with this consideration Coreboot/Libreboot just seem to be useless nowadays.