Well, I do see a distinction between 'ME has bugs', and 'ME is designed to be insecure and allow remote takeover'. From what I have read, ME requires provisioni

Well, I do see a distinction between 'ME has bugs', and 'ME is designed to be insecure and allow remote takeover'. From what I have read, ME requires provisioning to be enabled. Even the so called 'zero touch' provisioning requires you to first reboot the machine, then run a special DHCP server that sends out an Intel certificate. An attacker would have to forge this certificate, which has to be limited to the domain the specific computer exists in, get physical access to the network to run a DHCP server, reboot the machine, and then be able to provision it (if at all).