Fair question, the systems these will be used on already have the BIOS locked, but you are correct they would be able to by pass it if the could change the date.
Another way they could by pass would be to run ghost manually, but I have a possible solution for that as well.

But as I frequently find out there is always a better id10t out there!