It is recommended to enable a BIOS password and full disc encryption to prevent attacks against UEFI and Secure Boot.