Ah, I understand. The Mitigation guide says: "Intel highly recommends that the first in all mitigation paths is to unprovision the Intel manageability SKU to address the network privilege escalation vulnerability".

Unprovisioning AMT seems to be the essential part and I am curious if the other steps serve any real purpose.

The Mitigation Guide goes on to say: "Systems that are vulnerable [...] should be unprovisioned using the tools used to initially configure them [...] As an example, the Intel AMT Configuration Utility [...]"

So ACUConfig is just an example and specifically not the Intel recommended way. OP doesn't say that.