> If an attacker is sitting at the machine, they already have full control of the system. The bootloader isn't going to stop this kind of attack in the slightes

> If an attacker is sitting at the machine, they already have full control of the system. The bootloader isn't going to stop this kind of attack in the slightest. You can have physical protection, like locks. And you can disable boot sources. So of course this password protection can make attacks much more difficult.