The ME is simply a backdoor so that enterprise users can centrally manage their fleet. There's nothing really secure about it. It is probably still based on Minix and presumably full of security-relevant bugs.