Who do you have to trust the least? The other two choices are Chromebooks and Macbooks, or some homegrown Linux solution. Of those, only Chromebooks are locked down to the point that you can't do anything with it unless you intentionally unlock it. Which means it's safe for some kinds of things but not others, depending on your threat model.