I think that's quite obvious. You say that as if there were alternatives.
Are there any other, more convenient techniques to defend against evil maid attacks?
Thinkpads have a little switch under the bottom cover that will get flipped up when the cover is removed. There is a BIOS setting to require a password whenever this switch is toggled. When combined with signed BIOS updates it seems like it would be hard to bypass on a short term (like an actual "evil maid" attack).
https://www.usatoday.com/story/news/factcheck/2021/06/10/fac...