From what I've heard, the most secure way is to build your own from components that you purchase off the shelf locally.
Apparently, any computer purchased online can be secretly diverted for special treatment during shipping, before it reaches the customer.
But also know that every Intel CPU made in the last 10 years has a built-in backdoor. I assume this is also true for AMD CPUs.