OS has nothing to do with it -- they have a UEFI rootkit and (likely) access to the Intel Management Engine. So, you can run Windows w/antivirus or even switch

OS has nothing to do with it -- they have a UEFI rootkit and (likely) access to the Intel Management Engine. So, you can run Windows w/antivirus or even switch to FreeBSD... and it will protect you from nothing.