Windows users need to be cautious as windows is quite the vulnerable operating system. My advice would be A. Getting a MAC os or B. Going to Linux. Mac users can still be hacked and infected with “evil backdoors” but not as often as windows. Linux, well...for Linux if you were to get infected you can just go back to an old screenshot(if your using a VM)
In my honest opinion, the best thing to do would be to learn how to properly use computers, and distinguish between what might be malicious, and what you can use. If you don't download crapware from softonic or cnet, but the official reputable sources, you should definitely be fine. But a lot of people have trouble with spotting the difference.
I personally do prefer Linux over Windows, it's a lot better in so many ways. But games don't really work on it, so I tend to just use Windows with a feeling of shame.
But well, if you have to avoid Windows because you don't have enough time to learn how to properly use computers, there's option C which should be A: If you mainly use the internet, get a Chromebook or use something like Neverware Cloudready (which is ChromeOS for non-Chromebooks). Those things are probably the safest.
um, Bios-what-now? … not quite that bad, but I wouldn't know how to do that.
Well, it differs per computer (motherboard). If you really care about it, you could ask someone you know to help you. I can't really sum up every possible way to disable it in 1 single forum post
It might even not be possible, if your laptop manufacturer hasn't implemented something like that.
You could also just put a piece of tape over it, but aesthetic though.