But if it were me, in order to avoid hassles, I'd buy the same brand and model at both ends. Bear in mind, though, that it's laser-based and can't do color. They can't eradicate MP3, but they can keep many works from it, unless they are bootlegged, with legal consequences. I would want the best cursor control, good battery life, and a CD drive. There are so many models and types.
Weight is a big factor, too.
You have to have much more detailed criteria. Even if they are really interested in security, they sure are placing security interests over privacy. If it fails, check with IBM for a patch. I like the HP models, though they're pricier. Well, if you're just going to use the Palm for normal datebook and contact list stuff, the standard 2MB on the Palm III and Palm V is fine.