No. > An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs

No. > An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs This appears to imply an "exploit $site-backend -> provision AMT -> be vulnerable to network/local attack (for provisioned AMT) -> get AMT system privileges" route.