Fair on the half that matters most: with no radio and no network, a compromised management engine has nowhere to send the seed. The Ledger objection was never that the chip could read the key. It was that firmware could be shipped to forward it, and that path ran through the connected channel. A rea...