This should be illegal. And maybe it already is? What consequences will Lenovo face, if any?
None, they will just claim that opening the device voids the security features.
If you're a big enough company, you can sell a rock inside a hard-drive-shaped case and claim in advertising it's a hard drive, and not suffer any consequences, at least in the USA where we treat corporations with kid gloves.