Some motherboards just have a physical jumper that prevents BIOS flashing. This happens infrequently enough as to warrant it for one server, or 10 servers, or maybe 100 servers. Likely unpractical for 1000 servers though.
https://www.servethehome.com/the-ocp-dc-scm-hff-is-taking-ov...