I wonder if it might be possible to buy an "Intel monitoring USB stick" for whatever say $100 which you can plug into any machine to get control.

Sort of a consumer device built around the Intel Management Engine security hole.

I wonder what such a thing would look like, what the UI might be.... what could it do?

Maybe you could buy it on Amazon.