Any individual can purchase a system intel ME disabled.
Dell, System76, and Librem all sell at least some systems with ME disabled and those are just the ones I can think of without trying.
https://puri.sm/learn/intel-me/
https://blog.system76.com/post/168050597573/system76-me-firm...
https://m.hexus.net/tech/news/systems/112835-dell-now-offers...
As far as risk goes, the risk is very small and my personal opinion is that hardware is not worth replacing unless you are worried about being the target of a state-level actor who will spend the resources to gain clandestine physical access to your machine in order to surveil you.
ME attacks require a level of sophistication that is only worth it to a small number of entities pursuing extremely important targets.