There’s a third one I’ve heard:

• Intel VPro (the thing that privacy people disable because runs at a lower level than the OS and does mysterious stuff), is being used to remove the broken file while the OS is booting/crashed.