I agree that the G505S is a superior choice vs the ivy/sandy thinkpads as it has no ME/PSP thus making it the newest and last owner controlled x86 laptop but everyone be aware that it NEEDS a microcode update or you are very easily rooted due to the piledriver+ NMI CPU exploit additionally without the microcode the IOMMU won't work (and thus no qubes)
Most CPU's require microcode updates as there are critical errors in manufacturing microcode.