Was my laptop tampered with during shipping?

cbmem is the coreboot log when it boots, so it wouldn’t tell you if the write was successful, but when you reboot, you can see the new log and see whether it shows the new version or not.
To see current version use dmidecode -t 0

I’ll need @mladen to confirm but I’m pretty much 110% sure that ALL L13v3 are with TPM, and that we had a bunch of L13v2 that had i7 and TPM or i7 without TPM.
To be more precise, the L13v2 was the main skylake machine, and we had a batch with i5 processors, then we made another batch with i7 processors (because i7 was promised to some people). Then we stuck with i7, but this was still L13v2. After that, we introduced TPM as an addon. Users requesting/choosing TPM received a L13v2 which had a small TPM module manually soldered on the motherboard in the factory.
After that, we redesigned the motherboard, the TPM module was integrated in the motherboard instead of being a manually soldered TPM module, and the hardware killswitches were moved from the screen hinge to instead be on the left side of the machine. Since this was a new motherboard design, the version number was bumped to v3.
So, yes, L13v3 all have TPM in them. They are also all i7 machine, but L13v2 came both with i5 and i7 and came both with TPM and without TPM.
What you need to know to figure out if you have a l13v2 or l13v3 is to look at what is written in the bottom cover of the machine, and just to confirm, if your hardware killswitches are on the side of the body instead of being in the screen hinge, then you have a l13v3.

Like this? https://wiki.puri.sm/hw
I replied in the other as well.