Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case
(www.tomshardware.com)
They have a really long history of doing this stuff. Including outright espionage.
https://en.wikipedia.org/wiki/Lenovo#Security_and_privacy_incidents
https://legioncyber.com/insights/lenovos-security-failures-and-hidden-risks/
This last one is more about just poor quality.
https://www.lawsuitupdatecenter.com/lenovo-class-action-lawsuits.html