I've always been worried about malicious hardware or firmware in off-the-shelf computer equipment (e.g. the malware in particular Lenovo computers that reinstalled itself from the Windows Platform Binary Table), so I try to support projects like Coreboot. That's not always an option unfortunately. But I wonder if there is any wisdom in buying products that have been certified for classified government use. If I see the President or very high-level military staff using a particular laptop or smartphone model, does that mean that model has been thoroughly inspected for malicious firmware? Or does that convey no useful information because hardware approved for classified use is extensively customized for more security?
If I'm right: is there a list of up-to-date approved hardware anywhere online for the public to see?