This is a super valid point, and I'd never trust a factory Linux install any more than I'd trust a factory Windows install. Wipe and start from trusted media, 100% of the time.
The news here is that my machine is still supported if I do that. I don't have to wipe Linux and reinstall Windows and deny ever having run Linux on it before sending it back for service, if that becomes necessary.
And things like the fingerprint reader drivers might suck less.
There are more than 200,000 google search results for "remove Lenovo bloatware", for their laptops that ship with Windows