It's firmware, loaded on boot and replaceable by someone with root permissions.

So it's not a trivial thing to bypass, but it's not secure. Use a sticker or post-it note if you're paranoid.