I hope Intel's Management Engine isn't running on my Macs

[Winston]

From the Wikipedia article:

Essentially every Intel-based computer since Skylake (which was launched in August 2015), including most desktops and servers, were found to be vulnerable to having their security compromised, although all the potential routes of exploitation were not entirely known. It is not possible to patch the problems from the operating system, and a firmware (UEFI, BIOS) update to the motherboard is required, which was anticipated to take quite some time for the many individual manufacturers to accomplish, if it ever would be for many systems.

Emphasis added.

Oh joy.

And the Core m3, m5 and m7 were part of Skylake:
https://en.wikipedia.org/wiki/Skylake_(m...processors
So probably should have been in the Wikipedia list of affected processors.