But it's not persistent by itself. You are going to need both a persistent modified ME firmware to enable red mode and some x86 code do the actual microcode mo

But it's not persistent by itself. You are going to need both a persistent modified ME firmware to enable red mode and some x86 code do the actual microcode modification on each boot. If the attacker has that, they can already do a traditional VM rootkit to hide their modifications.