How do hosters protect physical dedicated servers?

Question

BIOS

When renting dedicated servers, remote access is provided through the so-called KVM-over-IP, or BMC IPMI (Supermicro).
In fact, using this method of remote control (consider full access), it allows the renter to do anything - flash / break the BIOS (which will damage the server), flash the SAS controller, etc., or somehow cleverly sew in the bios malicious code or something like that.
So, how do hosters protect, and do they protect servers from such "crimes" at all?

Answer 1

Well, you were given a server and you are responsible for the passwords to it.

Answer 2

The hoster has direct access to the hardware (either direct or through the manufacturer, and the hardware is branded with normal support), no matter what you do, at least they can roll back the state of the hardware to factory settings
. By the way, how can you physically break the hardware? flash bios to custom? even desktop hardware has support for dual bios flush, which allows you to return the working version back