@Nepiant >pretend-disableable IME and sell it to people like System76
No Intel laptops the System76 have a disable ME.

They use a proprietary BIOS with me_cleaner ran on it, which only cuts down the ME (as the CPU does not init without the ME) and sets the HAP bit to nicely ask the ME to hang after boot.

If you want a system that you can disable the ME on, the only option is a GNUbooted thinkpad.

As for AMD systems, the newest GNUbootable one you can get without the PSP is from 2011.

https://www.gnu.org/software/gnuboot/web/docs/hardware/

The NSA can't really target GNUboot systems you handcraft from separate components if you don't live in the USA.