Or any clown with access to Intel Management Engine module signing keys.

If you know, than you know why RISCV was fast-tracked in some places... =3