> If you have admin on windows you can flash the bios on regular motherboards with firmware that refuses to change.

The vendors even sell this as downgrade prevention!