AFAIK they can patch the Intel ME firmware and often do with BIOS updates. I am not sure about AMD PSP but that don't have access to the network so patching it

AFAIK they can patch the Intel ME firmware and often do with BIOS updates. I am not sure about AMD PSP but that don't have access to the network so patching it is less important.