Intel Management Engine, AMD PSP & Linux

Could someone share the latest information about Intel ME and AMD PSP vulnerabilities, especially as they pertain to Linux?

Specifically:

1. Do Intel ME and AMD PSP require ME/PSP drivers in order to be enabled? Would that necessarily mean that if there is no such driver installed under Linux, that under Linux there wouldn't be those vulnerabilities?
2. From what I read so far, at least for Intel ME, it relies on on-board networking devices as hooks, and that if you disable them and instead use a network card that is non-Intel, you will not be vulnerable. Does something similar apply to AMD?
3. In the case of using Windows guest VM, with ME driver installed, and GPU pass-through from Linux host, would the same vulnerabilities exist? I'm guessing that if you're using on-board NIC or Intel NIC on the host, that you may still be vulnerable?
4. Is the AMD PSP considered the lesser of 2 evils?

Thanks!