The UEFI firmware contains the option to switch off ME. On HEADS, ME will be directly disabled. This Intel generation cannot work without FSP firmware blobs from Intel, which are part of the coreboot build. On userspace side we offer a blob-free WiFi card, apart from that various other hardware components will inevitably come with proprietary firmware (e.g. the m.2 ssd).