What about firmware / hardware level threats like the Intel Management Engine?
Coreboot? Is that project still alive?
1