It also facilitates some hardware bring-up, and has management (hence the name) functionalities. So it's not really surprising that it has access to everything.

It also facilitates some hardware bring-up, and has management (hence the name) functionalities. So it's not really surprising that it has access to everything. That's not to say that it's at all acceptable that modern machines have such a gigantic security flaw.