FreeBSD root passwod reset single user mode

If I forget the root password on FreeBSD, I can put in the install CD/USB into the computer and then boot into single user mode, then reset the root password (without having to know the old) by typing `passwd'

This is convenient but isn't it also a massive security hole? If someone has physical access to a computer running FreeBSD does that mean they can just hijack the root account this way
Is there a way to disable this?