I don't care that such things exist, as long as there's a way to completely disable them. It should also be possible to verify that they are disabled, and be sure that they can't be re-enabled by rogue software.

The approach of Intel and AMD is completely hostile to anybody who cares about such things.