OK - if the BIOS allows it, you can try setting Secure Boot = enabled + Legacy boot. Then if the EFI boot files are not signed (secure) it may boot in Legacy mode. Some payloads may have signed EFI boot files however, in which case this trick won't work!