Apple: periodic reminder: set your firmware password

periodic reminder: If you care about pre-OS security, you should set a firmware password on your Mac. "sudo firmwarepasswd -setpasswd" in Terminal, or from the GUI in the recovery OS: https://t.co/k9PY6EvnpO

— Xeno Kovah (@XenoKovah) June 29, 2018

Something you can't do from the GUI that you can do from CLI is set it so that it asks for the password *every* boot (even the ones where you're not changing your boot target): "sudo firmwarepasswd -setpasswd -setmode full"

— Xeno Kovah (@XenoKovah) June 29, 2018