The risk of it actually happening is small. Nonetheless, Minifree can also
provide tamper-proof seals and other means of mitigating the risk. You have
to make sure you have a GPG keyring for your email, then import our public
key (from the contact page). Do not order through the website, send us your
info via email: name, address, telephone number etc and what you would like
to purchase. We will send you a custom invoice. This level of secrecy
partially mitigates the risk.
Then before shipping, I would make such modifications to the laptop and send
you pictures, encrypted, of what to check when it arrives.
This isn't a foolproof method, and only covers disassembly. For software
tampering, we can also provide a secured configuration; see:
https://libreboot.org/docs/gnulinux/encrypted_trisquel.html
https://libreboot.org/docs/gnulinux/grub_hardening.html