Before you could boot a OS from a LiveCD and have it secure because CD is read-only and non-writable.
Now less and less machines comes with optical drives.
It would be nice with a setting to boot disks or USB as read-only so the OS can not write to the disk.