Negative Rings in Intel Architecture

I found out about these through CRD's video about the horrors of HPs Daystarter, which uses ring -1 to hijack the windows boot process and display its own stuff instead of the boot screen. (https://youtu.be/ssob-7sGVWs)