While Intel is working with the big brands to patch the major security holes recently discovered in its Management Engine firmware, System76 plans to take it all to the next level by disabling IME entirely via a firmware update.
https://www.notebookcheck.net/System76-to-disable-Intel-Management-Engine-on-its-notebooks.267696.0.html
Why no mention of puri.sm? Purism ships laptops with removed ME, not just dissabled ME.
I don't believe this. They would order CPUs from Intel with IME removed. This is something which managed only and only Apple, as far as I know. Small companies are far below Intel's sight.
Thanks for mentioning puri.sm, I'll check their solutions.