[caspianm]

Here is a discussion of Intel limiting the code that can run in security subsystems in their processors:

https://news.ycombinator.com/item?id=11007060

I'm not saying this is acceptable, but it seems to be happening.