Purism just launched the Librem 16, and it’s making a very specific bet: privacy is worth paying for, even when that means fewer mainstream conveniences and a higher starting price. The laptop is available to order now for $2,899, with upgrade paths that climb to $4,199 for the Librem 16 Plus and $9,799 for the Librem 16 Max.

What makes the Librem 16 more than just another Linux laptop is the security architecture Purism is building into the hardware and firmware. The machine runs Coreboot firmware and disables Intel's Management Engine, and Purism is backing that claim with founder and CEO Todd Weaver’s earlier explanation of the approach that dates back to 2017. On top of the firmware posture, it includes two hardware kill switches placed in the strip between the keyboard and the screen hinge. One switch disconnects the Bluetooth and Wi-Fi controllers, and the other similarly neuters the webcam and microphone.

If you’re used to privacy features living in software settings, this is the category shift Purism is pushing: physical, user-controlled control points. The company does this while still offering a “reasonable” spec by today’s standards. The base model ships with an Intel Core i7-13620H CPU with ten cores, six performance cores and four efficiency ones, and it can boost up to 4.9 GHz. Out of the box you get 16 GB of DDR4 RAM and a single half-terabyte M.2 SSD, with the platform capable of up to 64 GB RAM and two M.2 SSDs.

The rest of the baseline configuration reads like a pragmatic office machine: four USB ports, two USB-C and two USB 3 Type-A, plus HDMI, Ethernet, a headphone jack, and a memory card slot. All models rely on the CPU’s integrated GPU. And for buyers who want to go further than kill switches, Purism lists additional customization options including completely removing the wireless card. There is also a special USB key that can verify the firmware hasn’t been tampered with, extended warranties, and an optional anti-interdiction service.

Now comes the part executives and technical buyers should not skim: the software and compatibility trade. By default, the Librem 16 comes with Purism’s PureOS, which the source notes is one of the few Free Software Foundation-approved Linux distributions because it contains no proprietary code at all. PureOS can be downloaded for free and run on your own hardware, but the source flags that the chance of some components not working due to missing firmware is quite high. It adds an important nuance: since even Debian began including non-free firmware with version 12, installing PureOS may leave things like Wi-Fi or the webcam not working.

PureOS 11 is the latest release mentioned here, released in May. The outlet’s quick look in a VirtualBox VM found it uses kernel 6.1 and GNOME 43.9, a clue that PureOS 11 is based on Debian 12, which shipped those versions. It defaults to a GNOME Wayland session, with X11 and GNOME Classic as options. The Calamares installer makes it easy to install, and the source says PureOS uses full-disk encryption by default, which aligns with the overall “security first” stance. It comes with Flatpak support preinstalled, but no Flatpak packages, and it offers only the Purism Store to add more, with the store having a restricted selection of pure-FOSS apps.

This is where the strategic implications get interesting. Purism’s Librem 16 is not positioned for maximum bang for the buck or absolute top-end performance, and the source explicitly frames it as a machine for buyers who put privacy, security, and strict Free Software principles ahead of price, convenience, or performance. That positioning matters because it suggests a product strategy built for a specific buyer segment that is often overlooked in enterprise procurement until a compliance need forces the conversation.

Regulatory and policy work around privacy and security rarely ends with “buy a laptop,” but procurement decisions often follow the same logic: reduce exposure, reduce telemetry, reduce dependency on closed components. The Librem 16’s approach, particularly disabling Intel's Management Engine and providing hardware kill switches for radio and sensors, is a tangible expression of that thinking. The long-term bet is that privacy-conscious users will accept higher costs and occasional hardware limitations in exchange for controllability.

For peers watching the category, Purism’s broader portfolio also reinforces the consistency of this thesis. The source notes Purism also offers privacy-centric smartphones, and that Purism’s Librem phones run the same OS. It also mentions that Purism has a 14-inch laptop, a mini PC, a server, and an Atom-based tablet called the Librem 11, plus a LapDock docking station for the phone introduced in 2023. The Librem 16’s launch, therefore, looks less like a one-off spec refresh and more like a repeatable, platform-level commitment.

Bottom line: the Librem 16 is priced like a niche security product because it is one. It starts at $2,899, it disables Intel’s Management Engine, it uses Coreboot and PureOS built for no proprietary code, and it gives users physical kill switches for Bluetooth, Wi-Fi, webcam, and microphone. In a world where “privacy settings” are often buried and reversible, Purism is selling something harder to undo: control at the hardware boundary. For executives evaluating the direction of privacy-centric computing, that is a signal worth watching.