iirc the intel management engine can be disabled through some weird fuckery, not sure if the same can be done for amd’s equivalent. if you custom flash a bios and run an open source os compiled by a trusted source, i think you got most potential backdoors covered (although the cpu microcode might still be an issue).
tiktok automatically watermarks it when u save a pic from a slideshow