I'd be willing to pay $50-100/year per system so I don't have to personally dig into every security and privacy mitigation.
Specifically, the tool or service should:
- Check for known vulnerabilities just like Management Engine described in the article, and disable it or patch it (if a patch is available).
- Uninstall or disable all tracking, reporting, spyware features (esp. in Windows 8 and 10 for example).
- Disable all unnecessary services to harden the OS. Yes, I realize that this has the potential to break things, so it has to be done intelligently.
- Etc.
I would have thought that anti-virus software would have been a perfect place to build in such capability, but AV software has generally turned into garbage unfortunately.