I was considering a umbrel pro, but I worry it may have a non foss bios, wich would be an easy target with IME active.
I haven’t found anything from Umbrel confirming coreboot support on the Pro, so I’d check with them before buying if that’s a requirement for you.
One thing worth separating, though: coreboot doesn’t automatically mean Intel ME is disabled, and having ME enabled doesn’t by itself make a machine an easy remote target. ME and Intel AMT (the remote management feature) aren’t the same thing.
I’d ask them which BIOS the Pro ships with and whether ME is disabled or can be disabled. That would tell you more than coreboot support alone.
I’ve asked and it’s not the answer I was expecting from then:
Coreboot isn’t listed in the Umbrel Pro’s published specifications, so I can’t confirm that it ships with coreboot. Its system firmware is currently undocumented publicly.