"Every"? Maybe not, but... from a brief web search, IME should give you the heebie-jeebies due to it's network access.[1]

AMD's PSP (now ASP) seems to be more of a local attack surface[2] that has its fair share of vulnerabilities.[3]

[1] https://www.franksworld.com/2025/09/18/the-intel-backdoor-no...

[2] https://www.digit.in/features/laptops/intel-me-and-amd-psp-t...

[3] https://www.amd.com/en/resources/product-security/bulletin/a...