This is particularly relevant in light of the pending BlackHat EU presentation (Dec 2017):

How to hack a turned-off computer, or running unsigned code in Intel ME | https://news.ycombinator.com/item?id=15298833 (Sep 2017, 239 comments)