Its kind of surprising that such a high value key wasn't split into multiple subkeys.
We've had HSMs for decades and Intel isn't forcing their OEMs to use them. This is pretty sad.
Sure, but intel is ultimately left holding the bag here not the oem, and it was totally within their power to put stipulations in the contract around key management.