doc crontab:

password protecting your bootloader doesn't prevent someone from walking up with an install CD or a boot floppy and just booting the box manually...

-C