The Intel ME runs a microkernel but it is still exploitable (even if you "clean" it).

SEL4 and Fuchsia seem to have a security focus, but whether that results in real world difficult to exploit devices is unclear.