Updating BIOS with Intune-managed password

If I use Intune to automatically configure a random BIOS password, what is the best strategy for updating the BIOS?

Can Dell Command Update handle the BIOS update without knowing the BIOS password?

I understand that Intune can manage driver and BIOS updates but tends to run a couple of revisions behind, so it may not be a reasonable solution. How is everyone else managing it?