Note that this particular thread is about the Lafite, not the Lafite Pro. My (non-Pro) Lafite has VT-x and VT-d available and virtual machines run just fine.
As you note, if the BIOS locked those options down then Windows users would be affected as well, and at that point this would probably be...
That website intentionally omits the BIOS downloads. Understandably, Clevo wants to make it hard for end users to find the BIOSes.
But, ... after poking around, I managed to find BIOS updates from the Clevo site that are more recent than 2019.
* BIOS: B10708.zip
* EC: E10707.zip
NOTE: I have...
In case it's of any help, I've just put my hands on my Lafite IV (specs are almost exactly the same as the OP). I can confirm that the BIOS version is still 1.07.07TPCS2, the BIOS settings for the SATA controller is on AHCI, and the NVME drive is recognized correctly.
$ sudo hdparm -tT...