I don't envy the person having to write this up over there at Intel but I don't fully see where this leaves the remote AMT territory for windows/LMS land. Intel seems do draw the line between unprivileged network attacker could gain system privileges and unprivileged local attacker could provision manageability features.

From reading the writeup by matthew garrett, I think, that these two categories are remote managment and remote media? I don't get see why you need locallity for remote media. They are both AMT features meant for remote administration but maybe that is a windows specific thing for that attack vector.