If you like anonymity, then the Retro thinkpads should still be the best as they are numerous and hardware profiling is useless (if you are a TAILS or tor user -- "Windows" everywhere!).

Also, check out the "hardware compatibility list" from Qubes OS (they've got an endorsement from Snowden right on their homepage). The i5 and i7 Intel CPUs virtualize and are very well understood by people that work with Xen. Notice how Intel just crashed with the latest generation CPU lines. Just because it is brand new, doesn't mean it is highest security and reliability. (For example, nuclear silos sometimes still use floppies and are air gap compartmentalized with people in the loop. Might not be best for all the nukes to be on skynet and latest videogame capable. Depends on what you are doing for what is "best.")

Modularity on Framework is pretty cool though.