mfw the average "password protected secure-boot UEFI bootloader" can just be resetted by removing the internal battery