In short, the Intel Management Engine and AMD Platform Security Processor,
which are on many motherboards,
allow for remote power on and remote control of a PC if connected to Ethernet, are closed source and have known vulnerabilities.[1]
This website has a more elaborate explanation: https://libreboot.org/faq.html#intel
[1]:
https://www.intel.com/content/www/us/en/architecture-and-tec...