Techanon here. If you are using a Intel CPU you should be aware of Intel's Management Engine which uses Minix on a sub-processor. This boots first so it bypasses any firewalls, OS patches etc. See the video for more info. The website posted describes a way to disable IME for the most part. WARNING! Fix involves flashing the firmware. There is the possibility that your system won't boot or even be bricked. (if your system doesn't boot, try reflashing the BIOS with the original BIOS from your mobo manufacterer) Your mileage may vary and viewer discretion is advised. Just an FYI for fellow anon's. I'm going to try it and will post later how it works out.
https://hothardware.com/news/researchers-figured-out-how-to-turn-off-intel-management-engine-11-thanks-to-nsa