We don’t preinstall at this point, we just provide install media, because Qubes doesn’t yet provide an OEM install setup like we have with PureOS that allows the user to set their own encryption key at first boot. However the Qubes install is relatively simple.
Yes the first Librem 13 was certified and when it came time to certify the Librem 13v2 they updated the terms of the certification with various fees, etc. We decided we could better use those funds to support Qubes ourselves so that’s what we’ve done sine then.