Apparently you're interested in the HCS08 and not the HC08 (as the latter does not have BDM).
Besides, the two have completely different security methods.
So, for the HCS08 (aka 9S08 or S08) the protection is achieved with the SEC bits (SEC00 and SEC01) of the NVOPT register. Normally, any value other than %10 means secure.
If you secure a device the only way to re-gain access to it is either to completely erase it, or to have enabled the BACKDOOR mechanism with an appropriate key which must be, however, entered from the app running inside the MCU. The BDM cannot bypass security on its own even if you know the backdoor key bytes.
Hope this helps.