My recommendation is buy a framework if they exist in your region and/or you can afford it. Small product line means better support, nowadays they have decent firmware updates, and they won’t abandon support for your system suddenly. (HSI 3)
Second best would be buying a dell since they have great linux support, deliver firmware on time, and less likely to abandon updates for latitude and other enterprise laptops. (Can go upto highest HSI levels)
I would stay away from Lenovo, their linux compatibility has suffered and their firmware releases are also a bit of a mess.
Similarly I would stay away from System76, and any other rebrand of Clevo Laptops, since their security is miserable (often HSI 0)
A big factor should be your budget and threat model. Dell laptops with very high security (secured core, memory encryption) are absurdly priced, and you can get way better specs in similar price from framework. Find the balance that wirks for you.
If budget no constraint, I’d buy the highest spec dell vpro line laptop, and set myself up as its admin using their free management software. This would allow me to do out of band uodates, remote management, etc on my machine. You’d be able to operate it even if the OS burns down/ becomes unbootable/ is corrupted.