Disabling the Intel Management Engine
Imagine the havoc if (when?) Intel's code signing keys for IME are leaked? Sure it might be <i>possible</i> to update keys in all the world's post-2006 Intel computers. But in reality it'd be a free for all that makes botnets of home routers look like a needle on a football field...