In short, Intel AMT, an OS-independent subsystem, is unauditable and exploitable, it should be disabled on your system if you do not 100% trust the vendor.
“So in conclusion, Intel has so far stopped anyone from tinkering with ME firmware in practice, and there is no way to trust the code running on your ME because it’s proprietary. So we are back to the days of the Sony Playstation, but for general purpose computers based on Intel x86. Matters only get worse now that Intel has squeezed a whole system into a chip, SoCs. We have no physical separation between the components that we can trust and the untrusted ME components, so we can’t even cut them off the mainboard anymore.”