Ah I see, we don't. I think they trust on bitlocker for that (and we have bitlocker with preboot PIN and TPM). Our BIOS doesn't even have a password.

Also we do need that option to reimage, we have a custom image that we install on each laptop. We don't use windows autopilot for reasons :P