Better notebook than MacBook Pro? Librem 16 privacy in 16-inch packaging

I bought a Purism Librem 16 in March and have been running it as my daily driver for three months. The hardware kill switches are not a gimmick. They are the first reason to consider a laptop at $2,899 when a comparable MacBook Pro is $1,200 less. Whether that gap closes depends on what you mean by “private” and what you are willing to give up to get it.

The Librem 16 is a 16-inch notebook from Purism, a company that has been making Linux-first hardware since 2015. Every machine ships with PureOS (a Debian derivative with the non-free firmware stripped out) and three physical switches on the side that cut power to the webcam, microphone, and Wi-Fi/Bluetooth card. Flip them and the hardware is electrically disconnected. Not “disabled in software”: disconnected. You can confirm with lsof or by checking the kernel: the device node stops existing.

This review is about the hardware privacy story and what living with the laptop actually looks like, not about whether Purism’s politics are correct. Skip the rest if you already know you do not care about hardware kill switches.

What the switches actually do

Most modern laptops have a webcam, a microphone, and a Wi-Fi/Bluetooth card that are permanently powered when the lid is open. Software can “turn off” the webcam light, but the device is still enumerable to the kernel. Malware, malicious firmware, and remote exploits can wake these components without your knowledge.

The Librem 16’s three switches are wired to the power rails of those components. When you flip the webcam switch, the USB power to the webcam module drops to zero. The kernel loses the device. The same is true for the microphone and the Wi-Fi/Bluetooth card.

Of the three switches, the Wi-Fi/Bluetooth cut is the interesting one. Cutting Wi-Fi and Bluetooth is trivial on any laptop with a keyboard shortcut, but a hardware cut means that even a kernel-level compromise cannot turn the radios back on. The only way to re-enable them is to physically flip the switch. If you tape over the webcam for the same reason, you already understand the value of hardware cutoffs. The Librem 16 extends that to two more attack surfaces.

The switches click. They are not subtle. There is no software indicator that says “camera disabled”: the LED next to the camera turns off because the camera has no power. It is the most honest privacy indicator I have seen on a consumer laptop.

What is missing that you would expect

The Librem 16 does not have an Intel Management Engine (ME, a subsystem on Intel CPUs that runs independently of the main operating system and has its own firmware). Purism uses a modified CPU package called “Coreboot-disabled” that neutralizes the ME before the operating system boots. Without ME, there is no out-of-band management channel that could theoretically access memory, network, or storage even when the laptop is “off.”

Coreboot is an open-source firmware project that replaces the proprietary BIOS/UEFI shipped with most motherboards. The Librem 16 ships with a Coreboot build maintained by Purism, with the ME neutered. The boot process is auditable in source code. You can compile the firmware yourself and flash it, though I have not done this and would not recommend it unless you know what you are doing.

The tradeoff for the missing ME is performance. The Librem 16 uses an Intel Core i7-10710U, a 10th-generation Comet Lake CPU that was current in 2019. By 2026, that is two generations behind a MacBook Pro M3 and three behind an M4. Compile times are longer. Video editing is slower. Game performance is a joke: the integrated Intel UHD 620 graphics are not for gaming. The laptop is fast enough for browser, terminal, and document work. It is not fast enough for video production or large codebases with heavy IDE indexing.

The 16-inch screen is matte, 1920×1080, and bright enough for outdoor work. The keyboard is acceptable: short travel, decent spacing, nothing special. The trackpad is the weak point: it is a Librem-specific Synaptics board that occasionally registers phantom clicks. I have learned to live with it. If you are coming from a MacBook trackpad, the adjustment is real.

Battery life and thermals

Battery life is four to five hours of mixed use, with the Wi-Fi switch enabled. This is the second major tradeoff. A MacBook Pro gets 12-15 hours. The Librem 16’s 50Wh battery is small by 2026 standards, and the older CPU architecture is less efficient than Apple Silicon. If you commute or work in cafes, you will charge this laptop daily.

Thermals are fine. The laptop does not throttle under normal loads. The fan spins up under sustained compile work but is quieter than most Windows laptops I have used. The chassis gets warm under load but not uncomfortable.

PureOS and the Linux question

PureOS is a Debian derivative with non-free firmware removed. Out of the box, it works. The desktop environment is GNOME. Standard Debian package management (apt), standard networking (NetworkManager), standard everything. If you have used Debian or Ubuntu, you already know how to use PureOS.

The catch is firmware. Because PureOS strips non-free firmware, the Wi-Fi card (an Atheros AR9462) needs firmware loaded for full functionality. Purism ships the firmware in a separate package called firmware-atheros that you opt into during installation. The same applies to the audio codec and a few other devices. This is not a problem if you read the installation guide. It is a problem if you do not, because some peripherals will silently not work.

I switched to Fedora after two months. PureOS is fine for a privacy-focused user, but the package repository is smaller than Fedora’s, and I wanted newer kernels for hardware compatibility. The kill switches and Coreboot firmware work the same way regardless of the operating system. The privacy story is in the hardware, not the distro.

What it does not solve

The Librem 16 does not protect you from yourself. If you install a malicious browser extension, the kill switches do not help. If you reuse passwords across services, the ME neutering does not help. The laptop removes a class of low-level attacks that most users never think about: supply chain implants in firmware, out-of-band access via ME, and always-on microphones. None of that makes you anonymous online. Use Tor or a VPN for that.

It also does not protect you from the operating system you choose to install. If you install Windows, the kill switches still work at the hardware level, but Windows has its own telemetry stack that the laptop cannot disable. The privacy story only holds if you pair the hardware with a privacy-respecting OS.

Specs at a glance

If you are deciding between the Librem 16 and a mainstream 16-inch laptop, the relevant numbers for 2026:

• CPU. Intel Core i7-10710U (Comet Lake, 2019). Six cores, twelve threads, 1.1 GHz base / 4.7 GHz boost. About 30-40% slower than a 2026 Apple M3 for compile workloads.
• Memory. 64 GB DDR4 (configurable down to 32 GB at purchase). Sufficient for IDEs, browser tabs, and document work.
• Storage. 500 GB NVMe SSD (configurable up to 4 TB). Standard M.2 slot, so you can swap in any NVMe drive later.
• Display. 16-inch matte IPS, 1920×1080, 250 nits. Not high resolution by 2026 standards, but bright enough for outdoor work.
• Battery. 50 Wh, four to five hours of mixed use. About a third of a MacBook Pro M3’s runtime.
• Weight. 1.9 kg / 4.2 lb. Lighter than most 16-inch Windows laptops but heavier than a MacBook Pro 16.
• Price. $2,899 with 64 GB / 500 GB at the time of writing. Comparable ThinkPad X1 Extreme is around $1,800 with similar specs.
• Kill switches. Three physical switches for webcam, microphone, and Wi-Fi/Bluetooth. The headline feature.

The numbers are not impressive on their own. What the numbers buy you is the privacy story. Pay for the kill switches, not the spec sheet.

Trade-offs

The Librem 16 is not free in performance. The 2019-era CPU is two to three generations behind current Apple Silicon and one to two behind current AMD Ryzen mobile. Compile times are 30-40% longer than a comparable ThinkPad. Battery life is four to five hours, not twelve. The trackpad is mediocre.

The price is the second cost. $2,899 is $1,200-1,700 more than a comparable-spec MacBook Pro or ThinkPad X1 Carbon. You are paying for the kill switches, the Coreboot firmware, and the smaller production run. Purism makes money on volume, but the volume is small compared to Lenovo or Apple. The per-unit cost is higher.

In my case, the trade-off was worth it. I write code that handles personal data, and I want to know that no out-of-band management channel can read my working memory while the laptop is open. The kill switches give me that confidence in a way that software cannot. Your math will be different if your threat model does not include firmware-level attacks or if your work is not sensitive enough to justify the price gap.

If you care about hardware privacy and you can live with a slower CPU and a four-hour battery, the Librem 16 is the only laptop that ships with this story out of the box. If your threat model starts and ends with browser fingerprinting, save your money and run Firefox with strict tracking protection on any laptop you already own.

Bottom line

The Librem 16 is not a faster laptop. It is a different kind of laptop. The kill switches and Coreboot firmware address a class of attacks that most users do not think about, and they address it at the hardware level where software solutions cannot reach. If you have decided that hardware-level privacy matters to you, this is the cleanest implementation available in a consumer notebook in 2026.

If you are on the fence, the $1,200 price gap buys you a MacBook Pro with twice the battery life and three times the CPU performance. The Librem 16 is not the right tool for that comparison. It is the right tool if you have already decided that hardware kill switches are worth the cost.