Check attached screenshot for understanding my confusion.
I don't understand SMX.
About VMX, I've found that Windows 11 has Hyper-V enabled by default and therefore VMX can be masked against running applications.
Both VMX and SMX CPU flags can be masked by Hyper-V. These CPU flags shown in the summary window.
The other flags reported by Intel ME are obviously not masked by Hyper-V as this is retrieved using a completely different interface which is not filtered in Hyper-V