A physical access vulnerability scenarios

At a company that i work in i was asked about how could they improve the security so i checked if the BIOS is password protected and it wasn't, so could you guys tell me some attack scenarios or what could an attacker gain if he had physical access to a computer and used the BIOS maliciously.
I know he could obviously change booting order and boot withanother OS.

access cybersecurity physical vulnerability