It is recommended to set a BIOS password and enable full disc encryption to prevent attacks which can bypass Secure Boot.