Thanks for the link, this article is more clear compared to the posted above.

I’m more interested to the scope of the exploit whether it could touch the flash of the controller or not as you can also do OTA update through the BLE component.

As long as the bare necessities is available e.g 14" with HDMI, 2 Type C with PD and DP Alt, MicroSD/SD card reader, smart card reader(?), 2 USB A 3.1, 1x 3.5mm jack, 1x ethernet port, kensington and easy maintenance, for me it’s enough. VGA connectors (dang those older projectors) can be handled with VGA to HDMI adapter.

My daily device is T14 G1 AMD with dualbooting separate SSD (M.2 WWAN slot used as SSD).

Woah, thanks for dropping the link. I did disable w10 update by modifying registry for each services which time consuming.