I’ll make sure to replace the CMOS and use disk encryption next time. My sensitive data is encrypted separately so I’ll be fine for now. I thought that with a bios password someone couldn’t just boot from a USB on my system but clearly it only delays such actions by a minute or two.
I have replaced it and it just clipped in and out of a round little thing it sits in. I happened to have the right battery on hand.