It’s a security feature. That way malware can’t downgrade your BIOS to use a previously patched vulnerability.