You can boot into Windows a bootable usb stick plugged in and once I even added the USB drive’s secure boot cert to the uefi MOK and Windows still did not care even though secure boot settings had changed(this dosen’t always happen, one time it did ask me for Bitlocker recovery key)
And as for the UEFI password, most laptop OEMs don’t include the feature