[inawarminister]

You can disable the first generation ME

https://libreboot.org/docs/hardware/gm45_remove_me.html

after that it's impossible though.