TEE on Android, for example. Intel ME on PCs, and probably TPMs also have a firmware of their own. Secure Enclave on Apple devices.
There's an outstandingly good perspective on the issue in another thread: https://news.ycombinator.com/item?id=36859465
A computer without TPM, a "management engine", an Ethernet card with real Firmware in a real ROM, no platform controller, nothing.
...and a completely open BIOS w/o any binary blobs, and UEFI layer.
Almost a 486DX, almost.