BIOS and UEFI control the basic functions of the PC. Updating them is risky, but can bring important benefits.
Something that causes a security risk at a BIOS level should never be allowed ...