This should be illegal. And maybe it already is? What consequences will Lenovo face, if any?
None, they will just claim that opening the device voids the security features.