What this does not protect against

• Older platform (10th gen) — less performance than higher tiers.
• Coreboot/Heads only on certain legacy models (X230/T430), on request.
• Intel ME present; no protection on an unlocked machine.