With an Intel processor you get years of coreboot development put into disabling and neutralizing the Intel Management engine.