As long as Intel Management Engine is enabled, trying to make your system secure is impossible.