Is there an un-bypassable way to protect my bios settings?

Is there a way to protect my bios settings beyond any sort of method of bypassing? I just set a long bios password but if it as easy as merely removing the CMOS battery to bypass the password, what should I do? To be more specific, my friend is plaing on having my computer boot MacOS instead of Windows without me noticing (as a joke). What can I do to keep this from happening?