huh. would it be possible to disable intel ME on desktop MBOs as well? Seems it's an EFI mod.

Neutralizing the ME is not a full "disable," because Intel has made that exceptionally hard to do.

Even this "neutralized ME" still boots before the main x86 CPU, and still runs even when the machine is off (if it's plugged in or has a laptop battery). And this "neutralized ME" still has an unknown binary that runs, it's just that the LibreBoot.org folks have found a way to strip it down to the bone without breaking the digital signatures.

https://github.com/corna/me_cleaner

(This posting is just Librem laptops releasing the me_cleaner for their hardware, a good thing, but not any new news.)