Intel ME confirmed privilege escalation exploit -- was unfixable until Intel created patch after multi-year delay: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075&languageid=en-fr

We strongly suggest using ARM and OpenPOWER machines at this time. x86 carries a high level of security risk for the sole benefit of lower cost.