X201 has a ME.bin blob, like the one used for AMT. It doesn't work without it (reboots after some time) and it's not clear for me if the "secondary embedded processors" exception in the RYF criteria applies to it (there are also the possible spying and backdoor issues). (Coreboot contains a CPU microcode update, but maybe it can be disabled: I believe Gluglug removes the microcode update for X60. Other blobs aren't needed or are allowed by the exception.)
pgpLPxDZGp7Hj.pgp
Description: PGP signature