The trivial way would be just going into the UEFI (it's not the BIOS for 15 years but anyway) config and just disable Secure Boot (and proceed to do the Evil Maid attack or whatever).
99% Secure Boot was forced to a locked state by the laptop firmware through some management utils to support the enterprise configuration.
It's just happens what someone with a full administrative access on the machine ie no boot password, no UEFI password, ability to run any (secure boot enabled) OS - can run firmware updates and one such update for whatever reason - reset the ability to change Secure Boot.
Or maybe author wasn't attentive enough and missed something, who knows.
The trivial way would be just going into the UEFI (it's not the BIOS for 15 years but anyway) config and just disable Secure Boot (and proceed to do the Evil Maid attack or whatever).
99% Secure Boot was forced to a locked state by the laptop firmware through some management utils to support the enterprise configuration.
It's just happens what someone with a full administrative access on the machine ie no boot password, no UEFI password, ability to run any (secure boot enabled) OS - can run firmware updates and one such update for whatever reason - reset the ability to change Secure Boot.
Or maybe author wasn't attentive enough and missed something, who knows.