they may be executed from your UEFI Shell, with the firmware's boot supervisor, or by other UEFI apps. UEFI apps may be made and put in independently of the original products brands (OEMs).
For a destructive UEFI https://kaleqyvf869229.blogdigy.com/the-best-side-of-secure-boot-42861393