With consternation I've just found my SPIN 5 has a faulty BIOS, because F12 to change boot order does not require superuser password (set in BIOS) - and it certainly should! In my long-term IT practice, I have not seen almost any BIOS (except for some rare s*itty old cheap mobos) where you could change boot order without entering the superuser password.
For obvious reasons, booting from other device than HDD can be easily misused to hack the computer. It's like leaving the door to your house open. Of course, you may still open the notebook and extract the HDD, but this takes considerably longer time, needs tools and is not a discrete action (like actually breaking or dismantling the door in the metaphore).
The only way possible to protect this notebook is to set the user password and require it on every boot, which is insufficient and silly, because both Windows and GNU/linux need to be restarted once a while and thus, cannot end up hanging on BIOS password prompt after performing "update and restart" in Windows e.g. Moreover, I need the computer to be used by more people, not just me.
If you disable F12, you're in trouble, still, because when you insert USB flash before powering on, it automatically boots from the USB flash (!) instead of from HDD and cannot be changed any way.
This is dangerously unsafe behavior. The correct way is to protect boot order changes by superpassword, like in every other BIOS out there.
Could you please make a BIOS update to fix this security issue?
Last BIOS update, which I have, was 2021/04/06 as you may see here https://www.acer.com/us-en/support/product-support/SP513-54N/NX.HQUEC.003/downloads?sn=NXHQUEC003021022336600
